Principal Security Engineer – Identity & Access (Fintech)

Location: Hybrid in Barcelona, Madrid, Buenos Aires, Montevideo, Sao Paulo, or Bucharest

Company

Builds global fintech infrastructure and is scaling a modern, highly automated identity security program.

What you will do

• Engineer automated Joiner-Mover-Leaver lifecycle processes, access certifications, Separation of Duties controls, and unified identity governance frameworks.
• Design authentication and authorization foundations across cloud, SaaS, and on-premise environments using SAML, OAuth2, OpenID Connect, and SCIM.
• Drive Zero Trust architecture and Adaptive MFA adoption across the enterprise.
• Lead identity integration strategies for mergers, acquisitions, and large-scale enterprise transformation initiatives.
• Configure integrations, write RBAC policies, engineer IGA platforms, and resolve complex access flows directly.
• Design self-service workflows, automated controls, and identity KPIs while partnering with engineering and commercial leaders.

Requirements

• Proven experience designing, building, or scaling identity and access programs in complex, fast-paced environments.
• Hands-on expertise in JML, SoD, access certifications, SAML, OIDC, OAuth2, SCIM, RBAC, and ABAC.
• Experience with enterprise identity platforms such as SailPoint, Saviynt, or Okta.
• Experience with highly regulated environments and requirements including PCI-DSS, SOX, and SOC 2.
• Familiarity with machine identity governance, secrets management, and API access.
• Strong mentoring, leadership, documentation, prioritization, and stakeholder communication skills.

Nice to have

• Relevant industry certifications in identity and access security.

Culture & Benefits

• Hybrid work arrangement across the listed locations.
• Hands-on, highly automated security engineering environment rather than a bureaucratic IAM function.
• Opportunity to shape identity strategy and execution during rapid growth and acquisitions.
• Focus on balancing least-privilege security with business usability and delivery speed.