🇬🇧
The English-language job board for Spain
89,000+ live jobsIAM Architect/Engineer
On-site in Madrid·Added yesterday (last checked 3 Nov)
Our summary
- Work mode
- On-site, Madrid
- English
- Required
- Experience
- 6+ years
- Benefits
- Private health insurance
Visa options
The ad rules out sponsorship
Per the ad: “you must have current and future work authorization in the country where you're applying, without the need for visa sponsorship by Strada.”
Skills
Nice to have
Requirements
What we're looking for
- Experience 6+ years of hands-on IAM experience, with at least 2 years in an architect or senior engineering role.
- Expertise in Entra ID (Azure AD), Entra B2C, and IAM-related Microsoft security tools.
- Experience integrating IAM with SAP, Workday, and other enterprise applications.
- Deep knowledge of SAML, OAuth, OpenID Connect, SCIM, and federation protocols.
- Hands-on experience with identity automation, PowerShell scripting, and API-based integrations.
- Strong understanding of zero-trust architecture, privileged access management (PAM), and adaptive authentication.
- Ability to collaborate with IT, HR, DevOps, and security teams to align identity solutions with business needs.
Nice to have
- Certifications such as Microsoft Certified: Identity and Access Administrator, CISSP, GIAC-GIAM, or Okta Certified Architect.
- Experience with Azure AD Conditional Access, Defender for Identity, and Entra Permissions Management.
- Knowledge of Identity Governance and Administration (IGA) platforms like SailPoint or Saviynt.
- Familiarity with DevOps and cloud security best practices in AWS/Azure environments.
Pay & benefits
What you'll get
- Opportunity to shape the architecture of mission-critical cloud applications.
- Collaborative and innovative work environment.
At Strada, we support your whole self-offering a range of benefits for your health, wellbeing, finances, and future. These include health coverage, wellbeing programs, paid leave (vacation, sick, parental), retirement plans, learning opportunities, and more.
We offer you a competitive total rewards package, continuing education & training, and tremendous potential with a growing worldwide organization.
Visa & relocation
To be considered, you must have current and future work authorization in the country where you're applying, without the need for visa sponsorship by Strada.
Please note: This job description does not limit Strada's right to assign or reassign responsibilities, including to subsidiaries, partners, or future business purchasers.
The role
Position: IAM Architect/Engineer
Role
IAM Strada Global is a leading provider of HR and payroll services, delivering secure and innovative workforce solutions worldwide. As we continue to scale, Identity & Access Management (IAM) is at the heart of our cybersecurity and business enablement strategy, ensuring seamless and secure access for employees, customers, and partners.
We are building a modern IAM framework that integrates across Entra ID, Entra B2C, SAP, and Workday, aligning with zero-trust principles, automation, and regulatory compliance.
- The IAM Architect will lead the design, implementation, and optimization of enterprise identity and access solutions, ensuring seamless integration across cloud, SaaS, and on-prem systems.
- This role will focus on Entra ID (Azure AD), Entra B2C, SAP, and Workday integrations, balancing security, user experience, and operational efficiency.
- This is a hands-on technical leadership role, working closely with security engineers, infrastructure teams, and business application owners to drive a modern IAM strategy at Strada.
What you'll do
- Identity & Access Architecture Design and implement a scalable IAM architecture utilizing Microsoft Entra ID, Entra B2C, and other identity platforms.
- Lead integration efforts across SAP, Workday, SaaS applications, and custom-built platforms.
- Define IAM governance models, including role-based access control (RBAC), attribute-based access control (ABAC), and just-in-time (JIT) access.
- Support the adoption of zero-trust identity principles, including MFA, conditional access, and passwordless authentication.
- Identity Lifecycle & Automation
- Architect identity lifecycle management solutions, automating provisioning/deprovisioning across HR, IT, and security systems.
- Implement Identity Governance & Administration (IGA) best practices, ensuring least privilege access and role alignment.
- Develop custom integrations and automation scripts (PowerShell, Python, API-based solutions) to enhance IAM workflows.
- Collaborate with HR (Workday) and ERP (SAP) teams to synchronize identity management with workforce operations.
- Security & Compliance Ensure regulatory compliance (GDPR, SOC 2, ISO 27001) by aligning IAM controls with security frameworks.
- Design and enforce privileged access management (PAM) solutions, securing admin accounts and critical systems.
- Support security audits and identity risk assessments, addressing access anomalies and reducing attack surfaces.
- Enhance identity threat detection and response capabilities in collaboration with SOC and SIEM teams.
Role
Location: Remote Spain
About Strada
Strada is a global HR and payroll services provider, specializing in HR technology consulting, payroll outsourcing, and managed services. The company helps organizations streamline their HR operations through SAP SuccessFactors and other HCM platforms, with a strong focus on international payroll compliance and multi-country payroll delivery. Strada operates across multiple regions, serving enterprise clients with complex, multinational workforces.
In Spain, Strada has a significant presence with offices in Madrid and Barcelona, supporting clients across the Iberian Peninsula and Europe. The company is highly relevant for international professionals with SAP HCM, SuccessFactors, and multi-country payroll expertise, as roles in Spain frequently require German, Dutch, French, Italian, or Nordic language skills alongside deep SAP technical knowledge. Strada offers a multicultural, client-facing environment where consultants work on global implementations, making it an attractive destination for experienced HR tech professionals looking to relocate to Spain.
- Industry
- HR Services
- Founded
- 1985
- Employees
- 1,000–5,000
- Headquarters
- Grand Rapids, USA
- In Spain
- Madrid, Barcelona
Good to know if you are moving
- Strada has offices in Madrid and Barcelona, with many roles requiring Spanish, German, French, Dutch, or Italian language skills alongside SAP HCM expertise.
- The company is a global payroll and HR tech consultancy, so international experience is highly valued and common among its consultants.
- Roles in Spain are typically client-facing, involving implementation and support of SAP SuccessFactors and payroll systems for large multinational clients.
- Strada offers a structured career path in HR technology consulting, with opportunities to move between countries and practices.
- The Spanish offices work on European and global accounts, so English is often the working language alongside Spanish.
In their own words
About the company & team
At Strada, possibility isn't just a promise - it's the foundation of everything we do. We believe in unlocking potential for every colleague, creating a journey of growth, discovery, and impact.
With the support, resources, and opportunities we provide, you'll build a fulfilling future - working on meaningful projects that span industries and regions, contributing to outcomes that matter.
Strada is a people, payroll, and technology leader simplifying international workforce management. Operating in 180+ countries, we design and deliver people-first solutions powered by cloud-based technology - helping organizations grow and enabling workforces to perform at their best.
Learn more at www.stradaglobal.com
- Anticipate Customer Needs - We stay ahead of trends so our customers can grow and succeed.
- Own the Outcome - We take responsibility for delivering excellence and ensuring things get done right.
- Challenge Ourselves to Work Smarter - We move faster than the world around us to drive change and accomplish more.
- Empower Each Other to Solve Problems - We tackle challenges head on, ask tough questions, and collaborate to find the best solutions.
- Care About Our Work - We understand that what we do impacts millions, and we have a responsibility to get it right.
Additional information
All offers are contingent on successful completion of background checks, where permitted by law and as appropriate for the role. These may include identity, education, employment, and in some cases, criminal history verification, checks against global watchlists, credit reports, and/or drug testing. You'll be informed of the specific checks applicable to your role and location during the recruitment process.
Strada is dedicated to fostering a diverse, equitable, and inclusive workplace where everyone feels valued and supported. We believe that embracing differences strengthens our teams and drives innovation and success.
Strada is an Equal Opportunity Employer and prohibits discrimination based on legally protected characteristics. We provide reasonable accommodations for disabilities and religious practices. Applicants may request reasonable accommodation by contacting their recruiter.
Nothing in this job description restricts management's right to assign or reassign duties and responsibilities of this job to other entities; including but not limited to subsidiaries, partners, or purchasers of Strada business units.
.
More jobs like this
or browse Security·Mid-level·Cybersecurity·Community of Madrid·HR Services
4mo ago
IAM Technician N1 – Identity & Access Management (IAM / IGA)
Remote from Spain
🇬🇧
Up to €500
🇬🇧🇬🇧 🇪🇸
🇬🇧
🇬🇧
🇬🇧 🇪🇸
🇬🇧
🇬🇧
🇬🇧