Senior Security IAM Engineer (AI)

Location: Remote basis, or hybrid basis if located in Barcelona; listed location is London, United Kingdom

Company

hirify.global is a global video game and interactive entertainment company that creates, develops, publishes, and operates games across mobile, web, PC, and console.

What you will do

• Design and evolve IAM architecture across AWS, GCP, SaaS applications, AI tooling, and remote access platforms.
• Build reusable Terraform modules, policy-as-code patterns, and Git-based workflows for IAM roles, policies, permission sets, group mappings, and access changes.
• Automate identity lifecycle management, access requests, approvals, onboarding, offboarding, access reviews, reporting, and operational workflows.
• Strengthen least-privilege controls, workload and service-account security, privileged access, Zero Trust segmentation, MFA, passwordless access, and federated identity.
• Support identity investigations, monitoring, audit readiness, SOC 2 and ISO 27001 alignment, and evidence collection.
• Build AI-assisted IAM workflows, including intelligent triage, access-review analysis, internal copilots, MCP integrations, and agentic automation with appropriate safeguards.

Requirements

• 8–12+ years of experience in IAM security engineering, cloud security, identity architecture, or related security engineering roles.
• Strong hands-on experience with AWS IAM, AWS Organizations, IAM Identity Center, SCPs, CloudTrail, GuardDuty, GCP IAM, Okta, and federated identity protocols including SAML, OIDC, OAuth, and SCIM.
• Production experience with Terraform-based IAM automation, reusable modules, state management, drift detection, rollback planning, policy-as-code, CI/CD, pull requests, and code review.
• Experience with Python, Bash, PowerShell, APIs, workflow automation, provisioning and deprovisioning, access reporting, and policy standardization.
• Strong understanding of least privilege, RBAC, ABAC, identity threat modeling, privileged and just-in-time access, identity lifecycle management, non-human identity risk, monitoring, and audit readiness.
• Ability to partner with engineering, infrastructure, security, IT, compliance, and audit teams in complex, high-scale environments.

Nice to have

• Experience with Britive, CyberArk, SailPoint, Okta Workflows, CIEM, identity governance, Wiz, GuardDuty, or Astrix.
• Experience in gaming, SaaS, or multi-studio environments.
• Experience with passwordless authentication, WebAuthn, FIDO2, AI-assisted IAM workflows, AI security frameworks, or agentic automation.
• Security certifications such as CISSP, AWS Security Specialty, or relevant IAM and cloud certifications.

Culture & Benefits

• Remote work is available, with a hybrid option for people located in Barcelona.
• Work in a global environment spanning cloud, SaaS, AI, engineering, and interactive entertainment.
• Collaborate across engineering, platform, IT, security operations, compliance, infrastructure, and studio teams.
• The role emphasizes automation-first security engineering, scalable systems, practical governance, and safe adoption of AI.
• Submit a résumé or CV written in English.