Senior IAM Security Engineer at game company Scopely, working remotely within Spain, builds and scales identity and access management across AWS, GCP, Okta, SaaS, and remote-access environments. The role centers on Terraform-based IAM automation, access workflow engineering, least-privilege and Zero Trust design, identity risk reduction, and AI-assisted security operations.
Compensation
Not disclosed
Location
ES - Spain
Work setup
Not specified
Seniority
Senior
Employment
Contract
Experience
12+ years
Category
Security
Posted
Skills
abac
agentic-ai
ai
anomaly-detection
api
authentication
automation
aws
bash
ci-cd
cissp
claude-code
cloud
cloud-native
cloud-security
cloudtrail
cspm
cyberark
design-patterns
event-driven-architecture
gcp
git
iam
infrastructure-as-code
iso-27001
mcp
oauth
okta
openid
powershell
python
rbac
saas
sailpoint
saml
scim
servicenow
soc-2
terraform
threat-modeling
workflow-orchestration
zero-trust
Must have
8-12+ years in IAM security engineering, cloud security, identity architecture, or related security engineering roles
Strong experience operating in cloud-first, high-scale environments
Experience partnering directly with engineering, infrastructure, and security teams
Experience designing and operating IAM solutions for global organizations with complex access needs
Strong track record in identity modernization, least privilege, and access automation
Proven experience building automation and reusable engineering patterns, not just manual IAM operations
Strong hands-on AWS IAM experience (IAM, Organizations, IAM Identity Center, SCPs, roles/policies, CloudTrail, GuardDuty, Access Analyzer, SSM)
Terraform-based IAM and access automation in production
Designing reusable Terraform modules for IAM roles, policies, permission sets, group mappings, and access patterns
Terraform state management, drift detection, rollback planning, and safe deployment of IAM changes
Nice to have
Experience with Britive, CyberArk, SailPoint, or similar PAM/PIM platforms
Experience with Okta Workflows, CIEM platforms, or identity governance tooling
Experience with Wiz, GuardDuty, Astrix, or similar tools for identity-related investigations
Experience in gaming, SaaS, or multi-studio environments
Experience with passwordless authentication, WebAuthn, or FIDO2
Security certifications such as CISSP, AWS Security Specialty, or relevant IAM/cloud certifications
Full description
Scopely is looking for a Senior IAM Security Engineer to join our Information Security team on a remote basis or hybrid basis if located in Barcelona. This role will focus on building, scaling, and securing Scopely’s identity and access management ecosystem across our cloud, SaaS, AI, and remote access environments, with a strong emphasis on Terraform-based IAM automation, access workflow engineering, least-privilege design, identity risk reduction, and AI-assisted operational workflows.
This is a highly technical, hands-on role for someone who can operate across AWS, GCP, Okta, AWS IAM Identity Center, Zero Trust access models, identity governance workflows, and modern AI-enabled engineering environments, while building scalable identity systems through Infrastructure as Code, workflow orchestration, and automation-first security engineering.
What You Will DoBuild and Evolve Modern IAM Architecture
Design and evolve Scopely’s IAM architecture to support a high-scale, cloud-first environment across AWS, GCP, SaaS applications, AI tooling, and remote access platforms.
Lead initiatives around:
Federated identity architecture using SAML, OIDC, OAuth, and SCIM
Workforce identity and access patterns across internal platforms
Least-privilege role design and access segmentation
RBAC and ABAC models for cloud and SaaS environments
Centralized access models using Okta, AWS IAM Identity Center, Google Cloud IAM, and cloud-native IAM services
Secure cross-account and cross-project access patterns
Service account, workload identity, and non-human identity governance
Zero Trust identity and access control design
Partner with engineering, infrastructure, and security teams to:
Standardize secure identity and access patterns
Reduce identity sprawl and excessive permissions
Improve access visibility and auditability
Build scalable identity controls for a fast-moving engineering environment
Own Terraform-Based IAM and Access Automation
Own and improve Terraform-based IAM and access automation across Scopely’s cloud and identity environment.
Design, build, and maintain:
Reusable Terraform modules for IAM roles, policies, permission sets, group mappings, and access patterns
Terraform workflows for Okta app assignments, group-based access, and IAM Identity Center automation
Standardized access modules that can be reused safely across teams and environments
Senior Security IAM Engineer at Scopely (ES - Spain) — aijobsearch
Git-based workflows, pull requests, and code review
Python, Bash, PowerShell, or similar scripting languages
API integrations, provisioning/deprovisioning automation, and CI/CD integration for identity workflows
Experience or strong interest in AI-assisted engineering tools (Claude Code, Codex, MCP, agentic workflows)
Strong understanding of least privilege, role engineering, and RBAC/ABAC design
Understanding of privileged access and JIT access models
Understanding of identity lifecycle management and non-human identity risk reduction
Understanding of identity logging, monitoring, access reviews, and audit readiness
Policy-as-code patterns for least privilege and permission boundary enforcement
Terraform-driven onboarding and offboarding flows for identity-related systems
Automation for service account and workload identity provisioning
Access reporting and audit visibility pipelines connected to code-based IAM workflows
Drive improvements in:
Standardization of IAM modules, variables, role definitions, and policy structures
Repeatability and consistency of access changes
Reduction of manual IAM operations
Auditability and change traceability
Safe rollout of identity changes through code review and pull request workflows
Pragmatic and engineering-oriented - balances security with usability and speed
High ownership - operates effectively in complex, fast-moving environments
Strong communicator - able to explain IAM risks and solutions to engineers, IT, and leadership
Bonus Points
Experience with Britive, CyberArk, SailPoint, or similar PAM/PIM platforms
Experience with Okta Workflows, CIEM platforms, or identity governance tooling
Experience with Wiz, GuardDuty, Astrix, or similar tools for identity-related investigations
Experience in gaming, SaaS, or multi-studio environments
Experience with passwordless authentication, WebAuthn, or FIDO2
Experience building AI-assisted workflows for IAM operations, documentation, access reviews, or investigations
Familiarity with AI security frameworks, governance, and safe agentic automation patterns
Security certifications such as CISSP, AWS Security Specialty, or relevant IAM/cloud certifications
This role is ideal for someone who is excited about building modern identity security beyond traditional approaches and wants to help Scopely scale secure access across cloud, SaaS, AI, and engineering environments. If you enjoy solving IAM challenges with Terraform, automation, reusable engineering patterns, and well-designed identity systems, we’d love to hear from you.
Please ensure that the résumé/CV you attach is written in English.
About Scopely
Scopely is a leading video game and global interactive entertainment company, home to many of the world’s most beloved and enduring experiences, including two of the most successful mobile games of all-time “MONOPOLY GO!” and “Pokémon GO,” along with “Stumble Guys,” “Star Trek™ Fleet Command,” “MARVEL Strike Force,” “WWE Champions,” the Scrabble® franchise, “Yahtzee® With Buddies,” and many others. Across mobile, web, PC, and console, Scopely creates, develops, publishes, and live-operates one of the most diversified and award-winning portfolios in the games industry — bringing hundreds of millions of players together through a shared love of play.
Founded in 2011, Scopely is powered by its exceptional team — including thousands of world-class gamemakers around the globe, a distinctive tenet-driven culture, and its proprietary technology platform, Playgami. Together, these strengths have fueled Scopely’s position as the #1 mobile games company in the U.S. and #2 globally, generating more than $10 billion in lifetime revenue. Whether building global sensations like “MONOPOLY GO!” from the ground up, or expanding through strategic acquisitions, including the FoxNext, GSN, and Scopely Explore games businesses — Scopely consistently delivers experiences players love today and return to for years to come.
Recognized multiple times as one of the "100 Most Influential Companies in the World" by TIME magazine and one of Fast Company's "World's Most Innovative Companies" and “Best Workplaces for Innovators,” Scopely believes that video games can be a force for good — creating meaningful connections, vibrant communities, and making life better through play.
Scopely has global operations and partners across four continents in more than a dozen countries worldwide. For more information, visit: .
Notice to Candidates: Scopely will never request payment or financial information during the application or hiring process. Please apply only through our official website and verify that all Talent Partner communications come from an email address ending in @.
Should you have any questions or encounter any fraudulent requests/emails/websites, please immediately contact recruiting@scopely.com. Our job applicant privacy policies are available here: California Privacy Notice and EEA/UK Privacy Notice.
Employment at Scopely is based solely on a person's merit and qualifications. Scopely does not discriminate against any employee or applicant because of race, creed, color, religion, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition (including breastfeeding), or any other basis protected by law. We also consider qualified applicants with arrest or conviction records, consistent with applicable federal, state and local law.