DevSecOps Engineer, Technical Referent
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
TL;DR
DevSecOps Engineer, Technical Referent (Cloud IAM): Strengthen identity, access, and endpoint security across multi-cloud environments with an accent on role models, SSO/IAM integrations, and secure-by-default automation. Focus on enforcing least privilege and SoD, building IaC/PaC provisioning workflows, and leveraging AI tools for access analysis and policy improvements.
Location: Hybrid in Barcelona or Madrid
Company
enables global companies to collect payments in 40 emerging markets as a payments processor and merchant of record.
What you will do
- Define and maintain enterprise role models (RBAC/ABAC), ownership, and approval flows aligned with access matrix.
- Lead SSO and identity integrations (SAML/OIDC, SCIM, MFA) on Microsoft Entra ID and standardize application onboarding.
- Administer AWS IAM and GCP IAM at organization/account/project levels, enforcing least privilege and SoD.
- Build automation for provisioning, deprovisioning, and access reviews using IaC/PaC; integrate JIT/PAM workflows.
- Strengthen endpoint posture with Jamf and Intune, tied to identity controls and conditional access.
- Implement guardrails, continuous controls, audit trails, and anomaly detection with remediation playbooks.
- Review Kubernetes RBAC and permissions in Amazon EKS to enforce least privilege.
- Partner with DevOps, Networking, Security, and Service Desk on workflows and improvements; document architectures and support audits.
Requirements
- Strong security engineering in IAM/SSO/PAM, role modeling (RBAC/ABAC), least privilege, and SoD.
- Public cloud expertise: AWS IAM, GCP IAM, Microsoft Entra ID, SAML/OIDC, SCIM; tools like Apono, Jamf, Intune.
- Automation: IaC/PaC (Terraform/Pulumi/Ansible), scripting (Python/Bash).
- Audit/compliance experience: PCI DSS, SOX, ISO 27001.
- Proven delivery of security automations reducing manual tasks and audit effort.
- Effective collaboration and communication with DevOps, Networking, Security, Service Desk.
Culture & Benefits
- Flexible schedules focused on impact and productivity.
- Combine self-managed focus time with in-person collaboration in hubs.
- Fintech environment with dynamic challenges.
- Referral bonuses, social budget for team activities.
- Houses for week-long global coworking retreats.
Hiring process
- Talent Acquisition reviews CV and updates by email at every step.
- Expect to hear back regardless of outcome.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →