Identity And Access Management Engineer

Identity and Access Management Engineer Location:Sant Just Desvern, B, ES, **City:Sant Just DesvernState:Barcelona (ES-B)Country:Spain (ES)Requisition Number:Overview The Identity and Access Management Engineer is part of the broader Bunge Global Identity and Access Management (IAM) team.You will be responsible for configuring, operating, and troubleshooting Bunge’s Identity Governance & Administration (IGA) solution to ensure secure, compliant, and efficient user access management across the enterprise.As a Subject Matter Expert (SME) in IGA, you will influence IAM design decisions and governance models.This position offers technical challenges, a dynamic environment for collaboration with diverse stakeholders across cybersecurity functions as well as with other business units, and continuous learning within a leading global organization.Key ResponsibilitiesManage IGA PlatformAdminister and enhance Bunge’s IGA platformConfigure and maintain joiner-mover-leaver (JML) lifecycle processes, access request workflows, approval processes, access certification campaigns, role models (RBAC/ABAC) and Segregation of Duties (SoD) policiesAnalyze and optimize role mining activitiesDevelop reports / dashboards to identify and track exceptions and/or KPIsLead Application IntegrationWork with application owners to onboard applications into the IGA platform via APIs, connectors, and custom scriptsAutomate provisioning/deprovisioning/review processes using IGA workflowsProvide Operational SupportProvide L2/L3 support for IGA platform-related issuesTroubleshoot IGA platform issues (e.g., provisioning, certification, integration)Collaborate with StakeholdersWork effectively with various internal stakeholders, including Business Technology (BT) (Cybersecurity, IT Operations, Application Development) and HR to facilitate seamless IAM governance.Drive Continuous ImprovementContribute to the ongoing enhancement of Bunge’s IAM program, processes, tools, and policies, influencing operational effectiveness.AI for IAMIdentify and pilot opportunities for leveraging Artificial Intelligence (AI) within the scope of IAM.Support and MentorshipProvides technical leadership and mentorship to other IAM colleagues.Support Audit and Compliance EffortsCollaborate with internal and external auditors by providing requested information, explaining IAM processes, and assisting with issue validation.Education, Experience and Certifications10+ years in the IT field, being a minimum of 6 years in Identity and Access Management or cybersecurity-related functionsBachelor of Science degree in Computer Science, Information Systems, Engineering, or ProgrammingIGA platform (SailPoint ISC preferred) and/or security-related (e.g., CISSP, CISM, CIAM) certifications are a plusIn-depth knowledge of IAM concepts, technologies, and best practices (e.g., identity lifecycle management, access certifications, role-based access control, privileged access management)Proficiency in configuring, managing and troubleshooting IGA platforms (e.g., SailPoint ISC/IQ, Saviynt, One Identity Manager)Proficiency in integrating business applications of different nature (e.g., cloud vs. on-premises, market vs. internally developed) with IGA platforms through various means (e.g., pre-built connectors, REST or SOAP APIs, Web Services, SCIM, JDBC)Experience with other IAM, security or IT Service Management (ITSM)-related platforms (e.g. Service Now) is a plus.Proficiency in scripting and coding languages (e.g., PowerShell, JSON)Working knowledge of cloud security principles and IAM integration with cloud platforms (Azure, AWS)Strong understanding of security frameworks, compliance standards (e.g., SOX, NIST Cybersecurity Framework, GDPR, ISO **), and regulatory requirements impacting IAMCollaborate effectively with stakeholders outside the IAM team, either BT teams or business (HR, Audit)Strong analytical, critical thinking, problem-solving skills with the ability to assess complex IAM and compliance challenges and design scalable solutions.Excellent communication skills (written and verbal) skills, with the ability to articulate technical concepts in a clear and concise mannerAbility to work independently with limited supervision in a fast-paced, dynamic environment#J-**-Ljbffr

10+ years in the IT field, being a minimum of 6 years in Identity and Access Management or cybersecurity-related functions Bachelor of Science degree in Computer Science, Information Systems, Engineering, or Programming IGA platform (SailPoint ISC preferred) and/or security-related (e.g., CISSP, CISM, CIAM) certifications are a plus In-depth knowledge of IAM concepts, technologies, and best practices (e.g., identity lifecycle management, access certifications, role-based access control, privileged access management) Proficiency in configuring, managing and troubleshooting IGA platforms (e.g., SailPoint ISC/IQ, Saviynt, One Identity Manager) Proficiency in integrating business applications of different nature (e.g., cloud vs. on-premises, market vs. internally developed) with IGA platforms through various means (e.g., pre-built connectors, REST or SOAP APIs, Web Services, SCIM, JDBC) Experience with other IAM, security or IT Service Management (ITSM)-related platforms (e.g. Service Now) is a plus. Proficiency in scripting and coding languages (e.g., PowerShell, JSON) Working knowledge of cloud security principles and IAM integration with cloud platforms (Azure, AWS) Strong understanding of security frameworks, compliance standards (e.g., SOX, NIST Cybersecurity Framework, GDPR, ISO **), and regulatory requirements impacting IAM Collaborate effectively with stakeholders outside the IAM team, either BT teams or business (HR, Audit) Strong analytical, critical thinking, problem-solving skills with the ability to assess complex IAM and compliance challenges and design scalable solutions. Excellent communication skills (written and verbal) skills, with the ability to articulate technical concepts in a clear and concise manner Ability to work independently with limited supervision in a fast-paced, dynamic environment #J-**-Ljbffr