IAM Engineer in Quinta de Portugal, Castelo Branco at Jobgether

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for an IAM Engineer based in Portugal.

This role offers the opportunity to strengthen enterprise security through identity governance, access management, and Zero Trust initiatives.
You will design and maintain secure identity solutions that protect critical systems and sensitive data.
The position combines technical expertise, security strategy, compliance support, and cross-functional collaboration.
You will work with modern IAM platforms, cloud security tools, and enterprise security frameworks to improve access controls.
Your contributions will directly support risk reduction, regulatory readiness, and secure digital operations.
This is an ideal opportunity for an experienced security professional passionate about identity, automation, and cybersecurity excellence.

As an IAM Engineer, you will lead identity and access management initiatives, ensuring secure, compliant, and efficient access across enterprise environments. You will help establish strong governance practices, implement security controls, and support the organization’s broader cybersecurity strategy.

• Lead and maintain IAM governance frameworks aligned with security best practices and regulatory requirements.
• Design, implement, and manage identity governance solutions using SailPoint Identity Security Cloud/IdentityIQ as the primary IAM platform and Okta as a secondary platform.
• Enforce least-privilege access models, role-based access controls, and secure access policies across users, services, and privileged accounts.
• Manage access lifecycle processes, including joiner, mover, and leaver workflows.
• Lead quarterly access reviews, access certifications, and remediation of access exceptions.
• Design and maintain secrets management solutions, including secure storage, credential rotation, and lifecycle management for sensitive information.
• Support engineering teams with secure secrets handling practices and integration patterns.
• Validate patch compliance, identify security gaps, and coordinate remediation activities based on risk priorities.
• Define and enforce encryption standards for data protection across cloud and enterprise systems.
• Support key management practices and secure communication protocols.
• Promote Zero Trust security principles through identity-centric access controls and continuous verification practices.
• Prepare compliance documentation, audit evidence, and security reports while partnering with governance and audit teams.

The ideal candidate is an experienced security professional with strong expertise in identity management, access governance, and enterprise security controls. You should have hands-on experience with IAM platforms, cloud environments, and security compliance practices, combined with strong communication and documentation skills.

• 5+ years of experience in Security Engineering, IAM, Identity Governance, or related cybersecurity roles.
• Strong hands-on experience with SailPoint Identity Security Cloud/IdentityIQ and Okta administration.
• Deep understanding of IAM concepts, including RBAC, ABAC, least-privilege models, and privileged access management.
• Experience implementing and managing secrets management solutions such as AWS Secrets Manager or equivalent platforms.
• Proven ability to validate patch compliance, manage security SLAs, and support remediation processes.
• Strong knowledge of encryption standards, secure communication protocols, and data protection controls.
• Experience supporting Zero Trust architectures and identity-driven security models.
• Familiarity with cloud platforms such as AWS, Azure, or GCP.
• Exposure to compliance frameworks including ISO 27001, SOC 2, PCI-DSS, or NIST.
• Experience working in large-scale or regulated enterprise environments is preferred.
• Excellent documentation, communication, and stakeholder management skills.

• Fully remote work environment with flexibility to work from your preferred location.
• Opportunity to work on enterprise-level cybersecurity and identity management initiatives.
• Exposure to modern IAM platforms, cloud security technologies, and Zero Trust frameworks.
• Opportunity to contribute to security improvements that protect critical business systems.
• Collaborative environment with cross-functional teams across technology and security domains.
• Professional growth opportunities through challenging security projects and continuous learning.
• Competitive compensation package based on experience, skills, and market conditions.