> Markdown version of [/jobs/ext/3110357-sr-engineer-iam](https://www.wearedevelopers.com/jobs/ext/3110357-sr-engineer-iam). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Sr Engineer Iam - **Company:** NTT DATA - **Location:** Leganés, Spain (Remote available) - **Contract:** Permanent contract - **Skills:** Active Directory, Application Programming Interfaces (APIs), Artificial Intelligence, Application Integration Architecture, Authentication Protocols, Microsoft Azure, Cyber Security, Identity and Access Management, Information Security Management, Key Management, OAuth, OpenID, Zero Trust Network Access, Security Assertion Markup Language (SAML), Software Vulnerability Management, Cyberark, Information Technology, Tenable Nessus, CIS Benchmarks - **Published:** September 27, 2026 - **Apply:** https://www.buscojobs.com.es/sr-engineer-iam-en-leganes-ID-372737001 ## About the Role + 5+ years in Cybersecurity Services, with a focus on Identity and Access Management (IAM). EDUCATION AND CERTIFICATION Bachelor's or master's degree in computer science, Information Security, Engineering, or equivalent experience. Highly desired certifications: SC-300 Identity & Access Administrator SC-100 Cybersecurity Architect AZ-500 Microsoft Azure Security Technologies Experience with Tier PAM platforms LANGUAGES Spanish and English (B2 level or higher). CORE REQUIRED COMPETENCIES Identity Lifecycle & Directory Services: Experience in lifecycle management and active hardening of hybrid directory services (Active Directory and Entra ID) ## Description Identity & Access Management (IAM) ConsultantPartially RemoteMadrid, SpainFull timeR-*****Who We AreAt Kyndryl, we run and reimagine the mission-critical technology systems that drive advantage for the world's leading businesses. We are at the heart of progress; with proven expertise and a continuous flow of AI-powered insight, enabling smarter decisions, faster innovation, and a lasting competitive edge. For our people-Kyndryls-that means doing purposeful work that powers human progress. Join us and experience a flexible, supportive environment where your well-being is prioritized and your potential can thrive.The RoleThe Identity & Access Management (IAM) Consultant will support the engineering, implementation, and hardening of enterprise identity security solutions. The role involves hands-on deployment and advisory across hybrid environments, collaborating closely with security, infrastructure, and application teams to enhance authentication, authorization, and posture management (SSPM).Who You AreMIN. REQUIRED EXPERIENCE+ 5+ years in Cybersecurity Services, with a focus on Identity and Access Management (IAM).EDUCATION AND CERTIFICATIONBachelor's or master's degree in computer science, Information Security, Engineering, or equivalent experience.Highly desired certifications:SC-300 Identity & Access AdministratorSC-100 Cybersecurity ArchitectAZ-500 Microsoft Azure Security TechnologiesExperience with Tier PAM platformsLANGUAGESSpanish and English (B2 level or higher).CORE REQUIRED COMPETENCIESIdentity Lifecycle & Directory Services:Experience in lifecycle management and active hardening of hybrid directory services (Active Directory and Entra ID)Modern AuthN & AuthZ:Deep understanding of modern authentication protocols (OIDC, OAuth 2.0, SAML) and a strong focus on migration away from legacy, unsecure authentication mechanismsZero Trust Policy Design:Experience configuring Conditional Access, managed device controls, and passwordless authentication modelsPrivileged Access & Secrets Management:Practical experience with PAM platforms (e.g., CyberArk, Entra ID PIM) and the secure lifecycle management of application secretsPost-Exploitation & Hardening:Knowledge of Active Directory security posture auditing (e.g., utilizing CIS benchmarks or SSPM/identity security scanning tools)Analytical Thinking:Proven troubleshooting capabilities in high-security, highly-regulated enterprise environments.Documentation & Stakeholder Management:Ability to draft clear procedures, build test plans, and coordinate with application owners for IAM onboarding.KEY RESPONSIBILITIESEngineering and Deployment:Support the deployment and configuration of enterprise IAM architectures (Entra ID, Hybrid Active Directory, PAM integration)Secure App Onboarding:Drive application integration with SSO and Provisioning services, validating API permissions, and preventing credential/access driftVulnerability Mitigation:Help analyze, implement, and run detection mechanisms or configuration playbooks to remediate accepted risks and legacy protocolsOperational Troubleshooting:Identify, isolate, and resolve access issues across cloud identity providers, hybrid connectors, and directory replication boundaries.Collaboration & Governance:Work under the guidance of the Lead Identity Architect to implement strict controls around trust boundaries, cloud tenant configurations, and privileged accounts.Being YouThe#J-*****-Ljbffr ## Related Videos - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [Delegating the chores of authenticating users to Keycloak](https://www.wearedevelopers.com/videos/1558-delegating-the-chores-of-authenticating-users-to-keycloak) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue) - [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company) - [Develop enterprise-ready applications for Microsoft Teams with Azure resources on modern web technologies](https://www.wearedevelopers.com/videos/187-develop-enterprise-ready-applications-for-microsoft-teams-with-azure-resources-on-modern-web-technologies) ## Related Articles - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)