Skip to content

Open nowPosted yesterday

IAM Architect/Engineer

Strada16 open roles

Where
ES-Madrid-Edificio América II
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowIAM Architect/EngineerStrada · ES-Madrid-Edificio América II
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Strada's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.3% of postings close within 7 days. Measured by our own scanner across the market. Strada postings stay open a median of 11 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.6%3 days
  3. 13.3%7 days
  4. 21.3%14 days
  5. 35.7%30 days
  6. 59.1%60 days
This job: posted yesterday

Strada median: 11 days open

The posting

Position: IAM Architect/Engineer

Location: Remote Spain

Join us on a journey of endless possibilities

At Strada, possibility isn’t just a promise – it’s the foundation of everything we do. We believe in unlocking potential for every colleague, creating a journey of growth, discovery, and impact.

With the support, resources, and opportunities we provide, you’ll build a fulfilling future – working on meaningful projects that span industries and regions, contributing to outcomes that matter.

Strada is a people, payroll, and technology leader simplifying international workforce management. Operating in 180+ countries, we design and deliver people-first solutions powered by cloud-based technology – helping organizations grow and enabling workforces to perform at their best.

Learn more at www.stradaglobal.com

Role

IAM Strada Global is a leading provider of HR and payroll services, delivering secure and innovative workforce solutions worldwide. As we continue to scale, Identity & Access Management (IAM) is at the heart of our cybersecurity and business enablement strategy, ensuring seamless and secure access for employees, customers, and partners.

We are building a modern IAM framework that integrates across Entra ID, Entra B2C, SAP, and Workday, aligning with zero-trust principles, automation, and regulatory compliance.

Role Overview

  • The IAM Architect will lead the design, implementation, and optimization of enterprise identity and access solutions, ensuring seamless integration across cloud, SaaS, and on-prem systems.
  • This role will focus on Entra ID (Azure AD), Entra B2C, SAP, and Workday integrations, balancing security, user experience, and operational efficiency.
  • This is a hands-on technical leadership role, working closely with security engineers, infrastructure teams, and business application owners to drive a modern IAM strategy at Strada.

Key Responsibilities

  • Identity & Access Architecture Design and implement a scalable IAM architecture utilizing Microsoft Entra ID, Entra B2C, and other identity platforms.
  • Lead integration efforts across SAP, Workday, SaaS applications, and custom-built platforms.
  • Define IAM governance models, including role-based access control (RBAC), attribute-based access control (ABAC), and just-in-time (JIT) access.
  • Support the adoption of zero-trust identity principles, including MFA, conditional access, and passwordless authentication.
  • Identity Lifecycle & Automation
  • Architect identity lifecycle management solutions, automating provisioning/deprovisioning across HR, IT, and security systems.
  • Implement Identity Governance & Administration (IGA) best practices, ensuring least privilege access and role alignment.
  • Develop custom integrations and automation scripts (PowerShell, Python, API-based solutions) to enhance IAM workflows.
  • Collaborate with HR (Workday) and ERP (SAP) teams to synchronize identity management with workforce operations.
  • Security & Compliance Ensure regulatory compliance (GDPR, SOC 2, ISO 27001) by aligning IAM controls with security frameworks.
  • Design and enforce privileged access management (PAM) solutions, securing admin accounts and critical systems.
  • Support security audits and identity risk assessments, addressing access anomalies and reducing attack surfaces.
  • Enhance identity threat detection and response capabilities in collaboration with SOC and SIEM teams.

Required Qualifications

  • Experience 6+ years of hands-on IAM experience, with at least 2 years in an architect or senior engineering role.
  • Expertise in Entra ID (Azure AD), Entra B2C, and IAM-related Microsoft security tools.
  • Experience integrating IAM with SAP, Workday, and other enterprise applications.
  • Deep knowledge of SAML, OAuth, OpenID Connect, SCIM, and federation protocols.
  • Hands-on experience with identity automation, PowerShell scripting, and API-based integrations.
  • Strong understanding of zero-trust architecture, privileged access management (PAM), and adaptive authentication.
  • Ability to collaborate with IT, HR, DevOps, and security teams to align identity solutions with business needs.

Preferred Qualifications

  • Certifications such as Microsoft Certified: Identity and Access Administrator, CISSP, GIAC-GIAM, or Okta Certified Architect.
  • Experience with Azure AD Conditional Access, Defender for Identity, and Entra Permissions Management.
  • Knowledge of Identity Governance and Administration (IGA) platforms like SailPoint or Saviynt.
  • Familiarity with DevOps and cloud security best practices in AWS/Azure environments.

What We Offer

  • Opportunity to shape the architecture of mission-critical cloud applications.
  • Collaborative and innovative work environment.

At Strada, our values guide everything we do:

  • Anticipate Customer Needs – We stay ahead of trends so our customers can grow and succeed.
  • Own the Outcome – We take responsibility for delivering excellence and ensuring things get done right.
  • Challenge Ourselves to Work Smarter – We move faster than the world around us to drive change and accomplish more.
  • Empower Each Other to Solve Problems – We tackle challenges head on, ask tough questions, and collaborate to find the best solutions.
  • Care About Our Work – We understand that what we do impacts millions, and we have a responsibility to get it right.

Benefits

At Strada, we support your whole self—offering a range of benefits for your health, wellbeing, finances, and future. These include health coverage, wellbeing programs, paid leave (vacation, sick, parental), retirement plans, learning opportunities, and more.

All offers are contingent on successful completion of background checks, where permitted by law and as appropriate for the role. These may include identity, education, employment, and in some cases, criminal history verification, checks against global watchlists, credit reports, and/or drug testing. You’ll be informed of the specific checks applicable to your role and location during the recruitment process.

Our commitment to Diversity and Inclusion

Strada is dedicated to fostering a diverse, equitable, and inclusive workplace where everyone feels valued and supported. We believe that embracing differences strengthens our teams and drives innovation and success.

Diversity Policy Statement

Strada is an Equal Opportunity Employer and prohibits discrimination based on legally protected characteristics. We provide reasonable accommodations for disabilities and religious practices. Applicants may request reasonable accommodation by contacting their recruiter.

Authorization to work in the Employing Country

To be considered, you must have current and future work authorization in the country where you're applying, without the need for visa sponsorship by Strada.

Please note: This job description does not limit Strada’s right to assign or reassign responsibilities, including to subsidiaries, partners, or future business purchasers.

#LI-remote

We offer you a competitive total rewards package, continuing education & training, and tremendous potential with a growing worldwide organization.

DISCLAIMER:

Nothing in this job description restricts management's right to assign or reassign duties and responsibilities of this job to other entities; including but not limited to subsidiaries, partners, or purchasers of Strada business units.

.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Strada's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on Strada's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    Strada's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.