Lead Identity & Access Management Specialist
With flexible, distributed-first ways of working, you'll have the support to do your best work, wherever you are. As the Lead Identity & Access Management Specialist you will be the primary architect and team leader driving our cloud application security posture. Your mission is to balance business agility with absolute data protection across our sprawling SaaS ecosystem (including M365, Slack, Salesforce, etc).
In this role, you will bridge the gap between user enablement and risk management by owning Identity and Access Management (IAM), deploying SaaS Security Posture Management (SSPM) tools to prevent configuration drift, and governing the entire lifecycle of our business applications. Crucially, you will lead, mentor, and scale a high-performing team of IT engineers with a strong security mindset, fostering a collaborative culture rooted in automation and proactive risk reduction.
What you'll doResponsibilities
- By building and automating robust Identity pipelines: You will design, configure, and maintain our Identity Providers (IdP) using SAML 2.0, OIDC, and OAuth 2.0. You will leverage SCIM to automate provisioning and ensure immediate, airtight offboarding to prevent orphan accounts.
- By hardening our SaaS posture against configuration drift: You will deploy and manage SaaS Security Posture Management (SSPM) tools. You will establish and enforce security baselines (such as CIS benchmarks) across our key tools, catching unauthorized administrative changes in real time.
- By governing the security of third-party integrations: You will audit, restrict, and manage OAuth permissions granted to third-party add-ons and AI extensions, ensuring our enterprise data remains inside approved boundaries.
- By mitigating Shadow IT and assessing third-party risk (TPRM): You will analyze CASB, proxy, and endpoint logs to discover unauthorized SaaS usage. You will partner with Procurement to assess the security profiles of new software vendors by auditing SOC 2 reports, ISO certifications, and CAIQ sheets.
- By championing technical leadership and team growth: You will build, mentor, and guide a dedicated team of IT professionals. By establishing engineering best practices, leading agile workflows, and promoting continuous learning, you will multiply your impact across the entire organization and cultivate the next generation of cloud security talent.
What you bringQualifications
- Experience: 5+ years of dedicated experience in Cloud Security, IAM Administration, or IT Security Operations, including 1-2 years of experience leading, mentoring, or acting as a technical coordinator for other engineers.
- Technical Skills:
- Deep expertise in identity protocols: SAML 2.0, OIDC, OAuth 2.0, and SCIM.
- Hands-on administration experience with modern IdPs (Okta or Microsoft Entra ID / Azure AD).
- Scripting capabilities in Python, PowerShell, or Bash to automate security workflows and interact with SaaS APIs.
- Soft Skills: Exceptional collaboration and communication skills to explain complex security practices to non-technical stakeholders, combined with a pragmatic, problem-solving mindset and proven leadership capabilities to unblock and motivate team members.
What you getBenefits & perks
- 6 weeks of paid vacation + 5 RTT Recovery Days + Seniority Leave
- Parental Leave: 16 Weeks Maternity / 4 Weeks Paternity + Reserved Daycare Spot
- Health Insurance - Competitive Coverage - for employees + dependents
- Hybrid Work – Flexible hybrid working model with a monthly home office allowance of €20 (hybrid) or €50 (fully remote).
- Public transportation: Coverage of 75% of subscription fee / Sustainable mobility package 200€/year
- CSE Specific Benefits i.e. vacation vouchers, negotiated fees etc.
Your recruitment buddy will be Alexandra Vorobyova, Lead Recruiter.
* Sighting sourced live from Wrike's career page