> Markdown version of [/jobs/ext/4551687-iam-architect-engineer](https://www.wearedevelopers.com/jobs/ext/4551687-iam-architect-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # IAM Architect/Engineer - **Company:** 1Us37 Strada U.S. Payroll, Llc - **Location:** Spain (Remote available) - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Automation of Tests, Microsoft Azure, Business Software, Software as a Service, Cloud Computing Security, DevOps, Identity and Access Management, Intrusion Detection and Prevention, Python (Programming Language), Microsoft Security Essentials, OAuth, Windows PowerShell, Role-Based Access Control, Openid Connect, Azure Active Directory, Zero Trust Network Access, Workday Integrations, Security Assertion Markup Language (SAML), SAP (Applications), Security Information and Event Management, Systems Integration, Enterprise Software Applications, Okta, Enterprise Integration, Api Design, SailPoint, Workday - **Published:** November 4, 2026 - **Apply:** https://startup.jobs/iam-architect-engineer-1us37-strada-us-payroll-llc-10665931 ## About the Role * Experience 6+ years of hands-on IAM experience, with at least 2 years in an architect or senior engineering role. * Expertise in Entra ID (Azure AD), Entra B2C, and IAM-related Microsoft security tools. * Experience integrating IAM with SAP, Workday, and other enterprise applications. * Deep knowledge of SAML, OAuth, OpenID Connect, SCIM, and federation protocols. * Hands-on experience with identity automation, PowerShell scripting, and API-based integrations. * Strong understanding of zero-trust architecture, privileged access management (PAM), and adaptive authentication. * Ability to collaborate with IT, HR, DevOps, and security teams to align identity solutions with business needs., * Certifications such as Microsoft Certified: Identity and Access Administrator, CISSP, GIAC-GIAM, or Okta Certified Architect. * Experience with Azure AD Conditional Access, Defender for Identity, and Entra Permissions Management. * Knowledge of Identity Governance and Administration (IGA) platforms like SailPoint or Saviynt. * Familiarity with DevOps and cloud security best practices in AWS/Azure environments. ## Description * The IAM Architect will lead the design, implementation, and optimization of enterprise identity and access solutions, ensuring seamless integration across cloud, SaaS, and on-prem systems. * This role will focus on Entra ID (Azure AD), Entra B2C, SAP, and Workday integrations, balancing security, user experience, and operational efficiency. * This is a hands-on technical leadership role, working closely with security engineers, infrastructure teams, and business application owners to drive a modern IAM strategy at Strada., * Identity & Access Architecture Design and implement a scalable IAM architecture utilizing Microsoft Entra ID, Entra B2C, and other identity platforms. * Lead integration efforts across SAP, Workday, SaaS applications, and custom-built platforms. * Define IAM governance models, including role-based access control (RBAC), attribute-based access control (ABAC), and just-in-time (JIT) access. * Support the adoption of zero-trust identity principles, including MFA, conditional access, and passwordless authentication. * Identity Lifecycle & Automation * Architect identity lifecycle management solutions, automating provisioning/deprovisioning across HR, IT, and security systems. * Implement Identity Governance & Administration (IGA) best practices, ensuring least privilege access and role alignment. * Develop custom integrations and automation scripts (PowerShell, Python, API-based solutions) to enhance IAM workflows. * Collaborate with HR (Workday) and ERP (SAP) teams to synchronize identity management with workforce operations. * Security & Compliance Ensure regulatory compliance (GDPR, SOC 2, ISO 27001) by aligning IAM controls with security frameworks. * Design and enforce privileged access management (PAM) solutions, securing admin accounts and critical systems. * Support security audits and identity risk assessments, addressing access anomalies and reducing attack surfaces. * Enhance identity threat detection and response capabilities in collaboration with SOC and SIEM teams., * Anticipate Customer Needs - We stay ahead of trends so our customers can grow and succeed. * Own the Outcome - We take responsibility for delivering excellence and ensuring things get done right. * Challenge Ourselves to Work Smarter - We move faster than the world around us to drive change and accomplish more. * Empower Each Other to Solve Problems - We tackle challenges head on, ask tough questions, and collaborate to find the best solutions. * Care About Our Work - We understand that what we do impacts millions, and we have a responsibility to get it right., All offers are contingent on successful completion of background checks, where permitted by law and as appropriate for the role. These may include identity, education, employment, and in some cases, criminal history verification, checks against global watchlists, credit reports, and/or drug testing. You'll be informed of the specific checks applicable to your role and location during the recruitment process.