**Role Overview**
As an **Identity and Access Management (IAM) Security Engineer**, you will be responsible for the design, implementation, and maintenance of our identity systems.
Your mission is to ensure that the right individuals access the right resources at the right time for the right reasons.
You will bridge the gap between security policy and technical execution, focusing on automation, least privilege, and seamless user experience.
**Key Responsibilities**
- **Architecture & Engineering**: Design and deploy scalable IAM solutions including Single Sign-On (SSO), Multi-Factor Authentication (MFA), and Directory Services (Active Directory/Azure AD/Okta).
- **Lifecycle Management**: Automate user provisioning, de-provisioning, and access certification processes to reduce manual overhead and human error.
- **Governance & Compliance**: Implement and maintain Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC) models.
Conduct regular access reviews and audits to ensure compliance with SOC2, ISO *****, or GDPR.
- **Privileged Access Management (PAM)**: Oversee the security of high-risk accounts using PAM tools (e.g., CyberArk, BeyondTrust, or HashiCorp Vault).
- **Incident Response**: Support security operations by investigating identity-related anomalies,



such as credential stuffing or unauthorized access attempts.
**Technical Qualifications**
- **Protocols & Standards**: Deep understanding of **SAML 2.0, OAuth 2.0, OpenID Connect (OIDC)**, and SCIM.
- **Cloud Proficiency**: Experience managing identity in cloud-native environments (AWS IAM, Azure AD/Entra ID, or Google Cloud IAM).
- **Scripting & Automation**: Ability to write scripts in **Python, PowerShell, or Go** to automate identity workflows and interact with APIs.
- **Infrastructure as Code (IaC)**: Familiarity with Terraform or CloudFormation for managing identity resources.
- **Tooling**: Hands-on experience with at least one major IAM platform (e.g., Okta, Ping Identity, SailPoint, or ForgeRock).
Sueldo: $50,****** - $80,****** al mes
Beneficios:
- Aumentos salariales
- Bebidas gratis
- Descuento de gimnasio
- Descuentos y precios preferenciales
- Días por enfermedad
- Estacionamiento de la empresa
- Estacionamiento gratuito
- Programa de referidos
- Seguro de gastos médicos
- Seguro de gastos médicos mayores
- Confiable dental
- Trabajo desde casa
- Vacaciones adicionales o permisos con goce de sueldo
- Vales de despensa
Lugar de trabajo: remoto híbrido en *****, Ladrón de Guevara, Jal.

📌 Iam Security Engineer (Guadalajara)
🏢 BONbLOC
📍 Guadalajara