IAM Architect/Engineer

Position: IAM Architect/Engineer

Location: Remote Spain

Join us on a journey of endless possibilities

At Strada, possibility isn’t just a promise – it’s the foundation of everything we do. We believe in unlocking potential for every colleague, creating a journey of growth, discovery, and impact.

With the support, resources, and opportunities we provide, you’ll build a fulfilling future – working on meaningful projects that span industries and regions, contributing to outcomes that matter.

Strada is a people, payroll, and technology leader simplifying international workforce management. Operating in 180+ countries, we design and deliver people-first solutions powered by cloud-based technology – helping organizations grow and enabling workforces to perform at their best.

Learn more at www.stradaglobal.com

Role

IAM Strada Global is a leading provider of HR and payroll services, delivering secure and innovative workforce solutions worldwide. As we continue to scale, Identity & Access Management (IAM) is at the heart of our cybersecurity and business enablement strategy, ensuring seamless and secure access for employees, customers, and partners.

We are building a modern IAM framework that integrates across Entra ID, Entra B2C, SAP, and Workday, aligning with zero-trust principles, automation, and regulatory compliance.

- The IAM Architect will lead the design, implementation, and optimization of enterprise identity and access solutions, ensuring seamless integration across cloud, SaaS, and on-prem systems.

- This role will focus on Entra ID (Azure AD), Entra B2C, SAP, and Workday integrations, balancing security, user experience, and operational efficiency.

- This is a hands-on technical leadership role, working closely with security engineers, infrastructure teams, and business application owners to drive a modern IAM strategy at Strada.

• Identity & Access Architecture Design and implement a scalable IAM architecture utilizing Microsoft Entra ID, Entra B2C, and other identity platforms.
• Lead integration efforts across SAP, Workday, SaaS applications, and custom-built platforms.
• Define IAM governance models, including role-based access control (RBAC), attribute-based access control (ABAC), and just-in-time (JIT) access.
• Support the adoption of zero-trust identity principles, including MFA, conditional access, and passwordless authentication.
• Identity Lifecycle & Automation
• Architect identity lifecycle management solutions, automating provisioning/deprovisioning across HR, IT, and security systems.
• Implement Identity Governance & Administration (IGA) best practices, ensuring least privilege access and role alignment.
• Develop custom integrations and automation scripts (PowerShell, Python, API-based solutions) to enhance IAM workflows.
• Collaborate with HR (Workday) and ERP (SAP) teams to synchronize identity management with workforce operations.
• Security & Compliance Ensure regulatory compliance (GDPR, SOC 2, ISO 27001) by aligning IAM controls with security frameworks.
• Design and enforce privileged access management (PAM) solutions, securing admin accounts and critical systems.
• Support security audits and identity risk assessments, addressing access anomalies and reducing attack surfaces.
• Enhance identity threat detection and response capabilities in collaboration with SOC and SIEM teams.

• Experience 6+ years of hands-on IAM experience, with at least 2 years in an architect or senior engineering role.
• Expertise in Entra ID (Azure AD), Entra B2C, and IAM-related Microsoft security tools.
• Experience integrating IAM with SAP, Workday, and other enterprise applications.
• Deep knowledge of SAML, OAuth, OpenID Connect, SCIM, and federation protocols.
• Hands-on experience with identity automation, PowerShell scripting, and API-based integrations.
• Strong understanding of zero-trust architecture, privileged access management (PAM), and adaptive authentication.
• Ability to collaborate with IT, HR, DevOps, and security teams to align identity solutions with business needs.
• Certifications such as Microsoft Certified: Identity and Access Administrator, CISSP, GIAC-GIAM, or Okta Certified Architect.
• Experience with Azure AD Conditional Access, Defender for Identity, and Entra Permissions Management.
• Knowledge of Identity Governance and Administration (IGA) platforms like SailPoint or Saviynt.
• Familiarity with DevOps and cloud security best practices in AWS/Azure environments.

• Opportunity to shape the architecture of mission-critical cloud applications.
• Collaborative and innovative work environment.

At Strada, our values guide everything we do:

• Anticipate Customer Needs – We stay ahead of trends so our customers can grow and succeed.
• Own the Outcome – We take responsibility for delivering excellence and ensuring things get done right.
• Challenge Ourselves to Work Smarter – We move faster than the world around us to drive change and accomplish more.
• Empower Each Other to Solve Problems – We tackle challenges head on, ask tough questions, and collaborate to find the best solutions.
• Care About Our Work – We understand that what we do impacts millions, and we have a responsibility to get it right.

At Strada, we support your whole self—offering a range of benefits for your health, wellbeing, finances, and future. These include health coverage, wellbeing programs, paid leave (vacation, sick, parental), retirement plans, learning opportunities, and more.

All offers are contingent on successful completion of background checks, where permitted by law and as appropriate for the role. These may include identity, education, employment, and in some cases, criminal history verification, checks against global watchlists, credit reports, and/or drug testing. You’ll be informed of the specific checks applicable to your role and location during the recruitment process.

Our commitment to Diversity and Inclusion

Strada is dedicated to fostering a diverse, equitable, and inclusive workplace where everyone feels valued and supported. We believe that embracing differences strengthens our teams and drives innovation and success.

Diversity Policy Statement

Strada is an Equal Opportunity Employer and prohibits discrimination based on legally protected characteristics. We provide reasonable accommodations for disabilities and religious practices. Applicants may request reasonable accommodation by contacting their recruiter.

Authorization to work in the Employing Country

To be considered, you must have current and future work authorization in the country where you're applying, without the need for visa sponsorship by Strada.

Please note: This job description does not limit Strada’s right to assign or reassign responsibilities, including to subsidiaries, partners, or future business purchasers.

We offer you a competitive total rewards package, continuing education & training, and tremendous potential with a growing worldwide organization.