SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Scopely, a leading video game and interactive entertainment company (home to MONOPOLY GO!, Pokémon GO, Stumble Guys, and others), is seeking a Senior Security IAM Engineer to join its Information Security team on a hybrid basis in Barcelona or remote.
This is a highly technical, hands-on role focused on building, scaling, and securing Scopely's identity and access management ecosystem across cloud (AWS, GCP), SaaS, AI, and remote access environments. You will design and evolve IAM architecture to support a high-scale, cloud-first environment, with emphasis on Terraform-based IAM automation, least-privilege design, identity risk reduction, and AI-assisted operational workflows.
Key responsibilities include:
**Build and Evolve Modern IAM Architecture**: Design federated identity architecture (SAML, OIDC, OAuth, SCIM), workforce identity patterns, least-privilege role design, RBAC/ABAC models, centralized access using Okta and AWS IAM Identity Center, secure cross-account/cross-project access, service account and workload identity governance, and Zero Trust identity design. Partner with engineering, infrastructure, and security teams to standardize secure patterns, reduce identity sprawl, improve access visibility, and build scalable controls for fast-moving environments.
**Own Terraform-Based IAM and Access Automation**: Design, build, and maintain reusable Terraform modules for IAM roles, policies, permission sets, and access patterns. Create Terraform workflows for Okta app assignments, group-based access, and IAM Identity Center automation. Implement policy-as-code patterns, Terraform-driven onboarding/offboarding flows, service account provisioning automation, and access reporting pipelines. Ensure mature Terraform practices around state management, drift detection, rollback planning, and safe production promotion.
**Automate Identity and Access Workflows**: Build scalable automation for identity lifecycle management, access requests, entitlement changes, and access reviews. Design provisioning/deprovisioning automation, access request and approval workflows, group-based access assignment, Okta app integration automation, IAM Identity Center permission set automation, self-service identity workflows, and identity reporting pipelines. Work with Terraform, Python, Bash, PowerShell, APIs, CI/CD systems, Okta Workflows, ServiceNow integrations, and AI tools (Claude Code, Codex).
**Strengthen Identity Security and Risk Reduction**: Lead initiatives to reduce identity-related risk across human and non-human identities. Design controls for excessive permissions reduction, service account hardening, long-lived credential reduction, cross-account trust policy hardening, permission boundary enforcement, role lifecycle management, just-in-time privileged access, break-glass workflows, and identity anomaly detection. Use AWS IAM Access Analyzer, CloudTrail, GuardDuty, GCP-native services, Okta System Log, CIEM, and CSPM platforms.
**Improve Zero Trust and Privileged Access Security**: Partner with teams to strengthen Zero Trust and privileged access controls. Support Twingate connectors, identity-aware remote access, Zero Trust segmentation, privileged access workflows, PAM platform integrations (Britive), adaptive access controls, MFA and passwordless adoption, and federated access into AWS, GCP, SaaS, and internal tools.
**Support Identity Investigations, Monitoring, and Audit Readiness**: Build IAM troubleshooting runbooks, identity-related detection workflows, access review processes, permission reporting, IAM logging and monitoring design, and operational metrics. Support investigations involving suspicious access, identity abuse, misconfigured integrations, broken federation, risky SaaS integrations, service account misuse, and cross-account access issues. Collaborate with compliance and audit teams for SOC 2 and ISO 27001 alignment.
**Build AI-Assisted Identity Security Workflows**: Design AI-assisted and automation-first workflows for scaling identity security. Lead initiatives around AI-assisted access review analysis, troubleshooting support, intelligent triage, security chatops integrations, identity workflow automation using agents, internal copilots for IAM operations, AI-assisted remediation recommendations, and MCP-enabled identity tooling.
**Requirements**:
The posting does not explicitly state years of experience or formal education requirements. However, the role requires deep expertise in: AWS and GCP cloud platforms; Okta and AWS IAM Identity Center; Terraform and Infrastructure as Code; identity and access management architecture; federated identity protocols (SAML, OIDC, OAuth, SCIM); Zero Trust security models; Python, Bash, PowerShell, and API development; CI/CD systems and Git workflows; IAM security tools (AWS IAM Access Analyzer, CloudTrail, GuardDuty, CIEM/CSPM platforms); Okta Workflows and workflow orchestration; ServiceNow and ticketing systems; AI-assisted engineering tools; and modern identity security practices. Experience with Twingate, Britive, or similar PAM/Zero Trust platforms is beneficial. The role requires strong technical depth, hands-on engineering capability, and ability to partner across security, infrastructure, and engineering teams.
