Senior Security IAM Engineer (Terraform)

Location: Remote in Spain

Company

hirify.global is a global interactive entertainment and video game company developing, publishing, and operating games across mobile, web, PC, and console.

What you will do

• Design and evolve IAM architecture across AWS, GCP, SaaS applications, AI tooling, and remote access platforms.
• Build reusable Terraform modules, policy-as-code patterns, and Git-based workflows for IAM roles, policies, permission sets, group mappings, and access changes.
• Automate identity lifecycle management, access requests, approvals, provisioning, deprovisioning, access reviews, and reporting.
• Strengthen least-privilege, Zero Trust, privileged access, workload identity, service account, and cross-account security controls.
• Support identity monitoring, investigations, audit readiness, SOC 2 and ISO 27001 alignment, and access evidence collection.
• Develop AI-assisted IAM workflows with human approval controls, auditability, secure integrations, and least-privilege tool access.

Requirements

• 8–12+ years of experience in IAM security engineering, cloud security, identity architecture, or related security engineering roles.
• Strong hands-on experience with AWS IAM, AWS Organizations, IAM Identity Center, GCP IAM, Okta, federated identity, SAML, OIDC, OAuth, and SCIM.
• Production experience with Terraform-based IAM automation, reusable modules, state management, drift detection, rollback planning, and safe deployment.
• Experience with Python, Bash, PowerShell, APIs, CI/CD, Git-based workflows, provisioning automation, and access reporting.
• Strong understanding of least privilege, RBAC, ABAC, identity threat modeling, privileged access, identity lifecycle management, and non-human identity risk.
• Experience working with engineering, infrastructure, security, compliance, and audit stakeholders in complex cloud-first environments.

Nice to have

• Experience with Britive, CyberArk, SailPoint, Okta Workflows, CIEM, identity governance, Wiz, GuardDuty, or Astrix.
• Experience with passwordless authentication, WebAuthn, FIDO2, gaming, SaaS, or multi-studio environments.
• Experience building AI-assisted IAM workflows and familiarity with AI security, governance, MCP integrations, and agentic automation.
• Security certifications such as CISSP, AWS Security Specialty, or relevant IAM and cloud certifications.

Culture & Benefits

• Remote work arrangement in Spain.
• Work across cloud, SaaS, AI, engineering, and global interactive entertainment environments.
• Collaboration with engineering, platform, IT, security operations, compliance, infrastructure, and studio teams.
• Focus on automation-first security engineering, reusable systems, practical governance, and scalable identity controls.