2 months ago
Remote, SpainSenior
Responsibilities
- Design and evolve IAM architecture across AWS, GCP, SaaS applications, AI tooling, and remote-access platforms.
- Build reusable Terraform modules and workflows for IAM roles, policies, permission sets, group mappings, Okta assignments, and AWS IAM Identity Center automation.
- Automate identity lifecycle management, access requests, approvals, provisioning, deprovisioning, access reviews, and reporting.
- Implement least-privilege, RBAC, ABAC, Zero Trust, privileged access, just-in-time access, and non-human identity security controls.
- Investigate and reduce identity-related risks involving excessive permissions, privilege escalation, service accounts, workload identities, credentials, and cross-account access.
- Improve IAM monitoring, detection, troubleshooting, audit readiness, access evidence collection, and identity investigation workflows.
- Build and govern AI-assisted IAM workflows with appropriate approval controls, least-privilege access, logging, and data safeguards.
- Provide technical leadership and guidance to engineering, infrastructure, IT, security, compliance, and studio teams.
Requirements
- 8–12+ years of experience in IAM security engineering, cloud security, identity architecture, or related security engineering roles.
- Strong hands-on experience with AWS IAM, AWS Organizations, IAM Identity Center, SCPs, IAM roles and policies, CloudTrail, GuardDuty, IAM Access Analyzer, and SSM.
- Strong experience with GCP IAM, service accounts, workload identity, organization/folder/project models, and audit services.
- Experience administering Okta, including groups, rules, application integrations, assignments, lifecycle management, and troubleshooting.
- Experience with SAML, OIDC, OAuth, SCIM, federated identity, cross-account access, cross-project access, and identity governance.
- Production experience building Terraform-based IAM automation, reusable modules, policy-as-code, state management, drift detection, rollback plans, and safe deployments.
- Experience with Python, Bash, PowerShell, APIs, workflow automation, Git-based change management, pull requests, code review, and CI/CD integration.
- Experience with Twingate or comparable ZTNA and remote-access platforms, including connectors, resources, and access policies.
- Strong understanding of least privilege, RBAC, ABAC, identity threat modeling, privileged and just-in-time access, identity lifecycle management, logging, monitoring, access reviews, and audit readiness.
- Experience or strong interest in Claude Code, Codex, MCP integrations, agent-based automation, AI-assisted detection and remediation, prompt security, model safety, and human-in-the-loop controls.
- Preferred experience with Britive, CyberArk, SailPoint, Okta Workflows, CIEM, Wiz, GuardDuty, Astrix, passwordless authentication, WebAuthn, FIDO2, AI security frameworks, or relevant security certifications such as CISSP or AWS Security Specialty.
- Strong communication, systems thinking, ownership, automation-first orientation, and ability to explain IAM risks and solutions to technical and leadership audiences.
Benefits
- Remote position based in Spain.
- Applicants must attach a résumé/CV written in English.
Tech Stack
Categories
About Scopely
Scopely develops, publishes, and live-operates free-to-play games across mobile, PC, and console, including MONOPOLY GO!, Stumble Guys, Star Trek Fleet Command, MARVEL Strike Force, WWE Champions, and Yahtzee With Buddies. Founded in 2011 and headquartered in Culver City, California, it uses its Playgami technology platform and collaborates with studios worldwide. In 2023, Scopely was acquired by Savvy Games Group and continues to operate as an independent subsidiary.