Identity & Access Governance Engineer - Sant Just Desvern

OverviewAs an Identity and Access Management Engineer, you will own and optimize Bunge’s IGA program to enable secure, compliant user access across the enterprise.You will work within the IAM team to shape governance models, design scalable access controls, and partner with cybersecurity, IT, HR, and business units.You will tackle challenging IAM problems, from lifecycle management to SoD and risk reporting, while exploring AI opportunities to enhance governance.This role offers a dynamic, collaborative environment with a global leader focused on sustainability and food security.ResponsabilidadesAdminister and enhance the IGA platform (SailPoint ISC preferred)Configure joiner-mover-leaver (JML) lifecycle, access workflows, and SoD policiesLead application onboarding via APIs/connectors; automate provisioning and reviewsDevelop reports/dashboards to track KPIs and exceptionsProvide L2/L3 support and perform configuration changesCollaborate with BT, HR, and other stakeholders to govern IAM processesDrive continuous improvement of IAM programs, tools, and policiesIdentify and pilot AI opportunities within IAMProvide technical leadership and mentorship to IAM peersSupport audit and compliance activities with documentation and issue validationRequisitos principales10+ years in IT; at least 6 years in IAM or cybersecurity-related rolesBachelor of Science in Computer Science, Information Systems, Engineering, or ProgrammingIGA platform experience (SailPoint ISC/IQ preferred); knowledge of other tools (Saviynt, One Identity Manager) is a plusStrong IAM concepts (identity lifecycle, access certifications, RBAC, PAM)Experience integrating applications (cloud/on-prem, REST/SOAP, SCIM, JDBC); pre-built connectorsScripting/coding: PowerShell, JSONCloud security knowledge (Azure, AWS); security frameworks (SOX, NIST CSF, GDPR, ISO *****)Excellent written/verbal communication; able to work independently in a fast-paced environmentExperience with ITSM tools (e.g., ServiceNow) is a plusAbility to collaborate with non-IAM stakeholders and drive governanceCommunication (oral and written)Collaboration across cross-functional teamsAnalytical and problem-solving mindsetSailPoint ISC/IQ; Saviynt; One Identity ManagerRBAC, ABAC, SoD conceptsAPIs/connectors, REST, SOAP, SCIM, JDBC

Requisitos principales10+ years in IT; at least 6 years in IAM or cybersecurity-related roles Bachelor of Science in Computer Science, Information Systems, Engineering, or Programming IGA platform experience (SailPoint ISC/IQ preferred); knowledge of other tools (Saviynt, One Identity Manager) is a plus Strong IAM concepts (identity lifecycle, access certifications, RBAC, PAM) Experience integrating applications (cloud/on-prem, REST/SOAP, SCIM, JDBC); pre-built connectors Scripting/coding: PowerShell, JSON Cloud security knowledge (Azure, AWS); security frameworks (SOX, NIST CSF, GDPR, ISO *****) Excellent written/verbal communication; able to work independently in a fast-paced environment Experience with ITSM tools (e.g., ServiceNow) is a plus Ability to collaborate with non-IAM stakeholders and drive governance Communication (oral and written) Collaboration across cross-functional teams Analytical and problem-solving mindset SailPoint ISC/IQ; Saviynt; One Identity Manager RBAC, ABAC, SoD concepts APIs/connectors, REST, SOAP, SCIM, JDBC