{"id":3685337,"url":"https://alion.io/job/strada-global-iam-architectengineer","title":"IAM Architect/Engineer","company":{"id":1946100,"name":"Strada Global","domain":"stradaglobal.com","url":"https://alion.io/company/stradaglobal","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"C","score":69,"open_postings":112,"ghost_share":0.518,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":28,"computed_at":"2026-11-03T05:54:40Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Madrid, Spain"],"countries":["ES"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":6,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure","optional":false},{"name":"GDPR","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"SOC 2","optional":false},{"name":"Zero Trust","optional":false},{"name":"AWS","optional":true},{"name":"Okta","optional":true}],"status":"live","first_seen_at":"2026-11-03T14:45:05Z","employer_posted_date":"2026-11-03","last_verified_at":"2026-11-04T02:20:38Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Position: IAM Architect/Engineer\nLocation: Remote Spain\nJoin us on a journey of endless possibilities\nAt Strada, possibility isn’t just a promise - it’s the foundation of everything we do. We believe in unlocking potential for every colleague, creating a journey of growth, discovery, and impact.\nWith the support, resources, and opportunities we provide, you’ll build a fulfilling future - working on meaningful projects that span industries and regions, contributing to outcomes that matter.\nStrada is a people, payroll, and technology leader simplifying international workforce management. Operating in 180+ countries, we design and deliver people-first solutions powered by cloud-based technology - helping organizations grow and enabling workforces to perform at their best.\nLearn more at www.stradaglobal.com\nRole\n\nIAM Strada Global is a leading provider of HR and payroll services, delivering secure and innovative workforce solutions worldwide. As we continue to scale, Identity & Access Management (IAM) is at the heart of our cybersecurity and business enablement strategy, ensuring seamless and secure access for employees, customers, and partners.\nWe are building a modern IAM framework that integrates across Entra ID, Entra B2C, SAP, and Workday, aligning with zero-trust principles, automation, and regulatory compliance.\nRole Overview\nThe IAM Architect will lead the design, implementation, and optimization of enterprise identity and access solutions, ensuring seamless integration across cloud, SaaS, and on-prem systems.\nThis role will focus on Entra ID (Azure AD), Entra B2C, SAP, and Workday integrations, balancing security, user experience, and operational efficiency.\nThis is a hands-on technical leadership role, working closely with security engineers, infrastructure teams, and business application owners to drive a modern IAM strategy at Strada.\nKey Responsibilities\nIdentity & Access Architecture Design and implement a scalable IAM architecture utilizing Microsoft Entra ID, Entra B2C, and other identity platforms.\nLead integration efforts across SAP, Workday, SaaS applications, and custom-built platforms.\nDefine IAM governance models, including role-based access control (RBAC), attribute-based access control (ABAC), and just-in-time (JIT) access.\nSupport the adoption of zero-trust identity principles, including MFA, conditional access, and passwordless authentication.\nIdentity Lifecycle & Automation\nArchitect identity lifecycle management solutions, automating provisioning/deprovisioning across HR, IT, and security systems.\nImplement Identity Governance & Administration (IGA) best practices, ensuring least privilege access and role alignment.\nDevelop custom integrations and automation scripts (PowerShell, Python, API-based solutions) to enhance IAM workflows.\nCollaborate with HR (Workday) and ERP (SAP) teams to synchronize identity management with workforce operations.\nSecurity & Compliance Ensure regulatory compliance (GDPR, SOC 2, ISO 27001) by aligning IAM controls with security frameworks.\nDesign and enforce privileged access management (PAM) solutions, securing admin accounts and critical systems.\nSupport security audits and identity risk assessments, addressing access anomalies and reducing attack surfaces.\nEnhance identity threat detection and response capabilities in collaboration with SOC and SIEM teams.\nRequired Qualifications\nExperience 6+ years of hands-on IAM experience, with at least 2 years in an architect or senior engineering role.\nExpertise in Entra ID (Azure AD), Entra B2C, and IAM-related Microsoft security tools.\nExperience integrating IAM with SAP, Workday, and other enterprise applications.\nDeep knowledge of SAML, OAuth, OpenID Connect, SCIM, and federation protocols.\nHands-on experience with identity automation, PowerShell scripting, and API-based integrations.\nStrong understanding of zero-trust architecture, privileged access management (PAM), and adaptive authentication.\nAbility to collaborate with IT, HR, DevOps, and security teams to align identity solutions with business needs.\nPreferred Qualifications\nCertifications such as Microsoft Certified: Identity and Access Administrator, CISSP, GIAC-GIAM, or Okta Certified Architect.\nExperience with Azure AD Conditional Access, Defender for Identity, and Entra Permissions Management.\nKnowledge of Identity Governance and Administration (IGA) platforms like SailPoint or Saviynt.\nFamiliarity with DevOps and cloud security best practices in AWS/Azure environments.\nWhat We Offer\nOpportunity to shape the architecture of mission-critical cloud applications. \nCollaborative and innovative work environment. \nAt Strada, our values guide everything we do:\nAnticipate Customer Needs - We stay ahead of trends so our customers can grow and succeed.\nOwn the Outcome - We take responsibility for delivering excellence and ensuring things get done right.\nChallenge Ourselves to Work Smarter - We move faster than the world around us to drive change and accomplish more.\nEmpower Each Other to Solve Problems - We tackle challenges head on, ask tough questions, and collaborate to find the best solutions.\nCare About Our Work - We understand that what we do impacts millions, and we have a responsibility to get it right.\nBenefits\nAt Strada, we support your whole self-offering a range of benefits for your health, wellbeing, finances, and future. These include health coverage, wellbeing programs, paid leave (vacation, sick, parental), retirement plans, learning opportunities, and more.\nAll offers are contingent on successful completion of background checks, where permitted by law and as appropriate for the role. These may include identity, education, employment, and in some cases, criminal history verification, checks against global watchlists, credit reports, and/or drug testing. You’ll be informed of the specific checks applicable to your role and location during the recruitment process.\nOur commitment to Diversity and Inclusion\nStrada is dedicated to fostering a diverse, equitable, and inclusive workplace where everyone feels valued and supported. We believe that embracing differences strengthens our teams and drives innovation and success.\nDiversity Policy Statement\nStrada is an Equal Opportunity Employer and prohibits discrimination based on legally protected characteristics. We provide reasonable accommodations for disabilities and religious practices. Applicants may request reasonable accommodation by contacting their recruiter.\nAuthorization to work in the Employing Country\nTo be considered, you must have current and future work authorization in the country where you're applying, without the need for visa sponsorship by Strada.\nPlease note: This job description does not limit Strada’s right to assign or reassign responsibilities, including to subsidiaries, partners, or future business purchasers.\nWe offer you a competitive total rewards package, continuing education & training, and tremendous potential with a growing worldwide organization.\nDISCLAIMER:\nNothing in this job description restricts management's right to assign or reassign duties and responsibilities of this job to other entities; including but not limited to subsidiaries, partners, or purchasers of Stradabusiness units.\n.","description_format":"text","description_chars":7265,"description_truncated":false,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Retirement plans"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Human Resources","Payroll Services","Enterprise Apps Implementation Partners"],"lifecycle":[{"event":"open","at":"2026-11-03T14:45:05Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":28,"reasons":["conf:1","win:early","comp:brand"],"computed_at":"2026-11-04T03:40:10Z"},"pay":null,"html_url":"https://alion.io/job/strada-global-iam-architectengineer","json_url":"https://alion.io/job/strada-global-iam-architectengineer.json","meta":{"generated_at":"2026-11-04T03:40:10Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":5687,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-05T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1946100},"rest":"https://alion.io/mcp/rest/get_company?id=1946100"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fstrada-global-iam-architectengineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fstrada-global-iam-architectengineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fstrada-global-iam-architectengineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/strada-global-iam-architectengineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fstrada-global-iam-architectengineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3685337}},{"tool":"search_jobs","arguments":{"company":"stradaglobal.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3685337},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}