Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

Tailor your resume to this Senior Security IAM Engineer role.

Rezi rewrites your resume against Scopely's job description. Free.

Resume score gauge reading 58 out of 100

Don't guess if your resume is good enough.

See how it scores against the Senior Security IAM Engineer posting at Scopely — free, in seconds.

About the Role

This role will focus on building, scaling, and securing Scopely’s identity and access management ecosystem across our cloud, SaaS, AI, and remote access environments, with a strong emphasis on Terraform-based IAM automation, access workflow engineering, least-privilege design, identity risk reduction, and AI-assisted operational workflows. This is a highly technical, hands-on role for someone who can operate across AWS, GCP, Okta, AWS IAM Identity Center, Zero Trust access models, identity governance workflows, and modern AI-enabled engineering environments, while building scalable identity systems through Infrastructure as Code, workflow orchestration, and automation-first security engineering.

Responsibilities

Design and evolve Scopely’s IAM architecture to support a high-scale, cloud-first environment across AWS, GCP, SaaS applications, AI tooling, and remote access platforms.
Lead initiatives around federated identity architecture using SAML, OIDC, OAuth, and SCIM.
Lead initiatives around workforce identity and access patterns across internal platforms.
Lead initiatives around least-privilege role design and access segmentation.
Lead initiatives around RBAC and ABAC models for cloud and SaaS environments.
Lead initiatives around centralized access models using Okta, AWS IAM Identity Center, Google Cloud IAM, and cloud-native IAM services.
Lead initiatives around secure cross-account and cross-project access patterns.
Lead initiatives around service account, workload identity, and non-human identity governance.
Lead initiatives around Zero Trust identity and access control design.
Partner with engineering, infrastructure, and security teams to standardize secure identity and access patterns.
Partner with engineering, infrastructure, and security teams to reduce identity sprawl and excessive permissions.
Partner with engineering, infrastructure, and security teams to improve access visibility and auditability.
Partner with engineering, infrastructure, and security teams to build scalable identity controls for a fast-moving engineering environment.
Own and improve Terraform-based IAM and access automation across Scopely’s cloud and identity environment.
Design, build, and maintain reusable Terraform modules for IAM roles, policies, permission sets, group mappings, and access patterns.
Design, build, and maintain Terraform workflows for Okta app assignments, group-based access, and IAM Identity Center automation.
Design, build, and maintain standardized access modules that can be reused safely across teams and environments.
Design, build, and maintain policy-as-code patterns for least privilege and permission boundary enforcement.
Design, build, and maintain Terraform-driven onboarding and offboarding flows for identity-related systems.
Design, build, and maintain automation for service account and workload identity provisioning.
Design, build, and maintain access reporting and audit visibility pipelines connected to code-based IAM workflows.
Drive improvements in standardization of IAM modules, variables, role definitions, and policy structures.
Drive improvements in repeatability and consistency of access changes.
Drive improvements in reduction of manual IAM operations.
Drive improvements in auditability and change traceability.
Drive improvements in safe rollout of identity changes through code review and pull request workflows.
Ensure mature Terraform engineering practices around state management.
Ensure mature Terraform engineering practices around drift detection and remediation.
Ensure mature Terraform engineering practices around rollback planning.
Ensure mature Terraform engineering practices around blast-radius awareness for IAM changes.
Ensure mature Terraform engineering practices around safe promotion of access changes into production.
Build scalable automation for identity lifecycle management, access requests, entitlement changes, access reviews, and day-to-day IAM operations.
Design and implement provisioning and deprovisioning automation.
Design and implement access request and approval workflows.
Design and implement group-based access assignment and role mapping.
Design and implement Okta app integration and assignment automation.
Design and implement IAM Identity Center permission set automation.
Design and implement self-service identity workflows for internal teams.
Design and implement identity reporting and access visibility pipelines.
Design and implement operational tooling that reduces repetitive IAM work.
Drive improvements in repeatability.
Drive improvements in auditability.
Drive improvements in operational safety.
Drive improvements in reduction of manual IAM work.
Drive improvements in secure-by-default access onboarding.
Lead initiatives to reduce identity-related risk across human and non-human identities.
Design and implement controls for excessive permissions and privilege escalation reduction.
Design and implement controls for service account and workload identity hardening.
Design and implement controls for long-lived credential reduction.
Design and implement controls for cross-account trust policy review and hardening.
Design and implement controls for permission boundary enforcement.
Design and implement controls for role lifecycle management.
Design and implement controls for just-in-time and time-bound privileged access.
Design and implement controls for break-glass access workflows.
Design and implement controls for identity anomaly detection and misuse investigation.
Improve Zero Trust and privileged access controls across Scopely’s environment.
Support and enhance Twingate connectors, resources, and access policy design.
Support and enhance identity-aware remote access controls.
Support and enhance Zero Trust segmentation for internal applications and privileged systems.
Support and enhance privileged access workflows.
Support and enhance PAM platform integrations such as Britive.
Support and enhance adaptive access controls.
Support and enhance MFA and passwordless adoption.
Support and enhance federated access into AWS, GCP, SaaS platforms, and internal tools.
Support and enhance secure vendor and contractor access patterns.
Drive improvements in human identity security.
Drive improvements in non-human identity security.
Drive improvements in access visibility.
Drive improvements in privileged session control.
Drive improvements in access policy consistency across environments.
Build and enhance IAM troubleshooting runbooks.
Build and enhance identity-related detection and triage workflows.
Build and enhance access review processes.
Build and enhance permission reporting and evidence collection.
Build and enhance IAM logging and monitoring design.
Build and enhance operational metrics for identity security maturity.
Support investigations involving suspicious access activity.
Support investigations involving identity and permission abuse.
Support investigations involving misconfigured app integrations.
Support investigations involving broken federation and provisioning flows.
Support investigations involving risky SaaS integrations.
Support investigations involving service account misuse.
Support investigations involving cross-account access issues.
Collaborate with compliance and audit stakeholders to ensure SOC 2 and ISO 27001 alignment.
Collaborate with compliance and audit stakeholders to ensure access review evidence readiness.
Collaborate with compliance and audit stakeholders to ensure documentation of IAM controls and workflows.
Collaborate with compliance and audit stakeholders to ensure clear traceability for privileged access and entitlement changes.
Design and improve AI-assisted and automation-first workflows that help Scopely scale identity security safely.
Lead initiatives around AI-assisted access review analysis.
Lead initiatives around AI-assisted troubleshooting and documentation support.
Lead initiatives around intelligent triage for identity-related findings.
Lead initiatives around security chatops integrations.
Lead initiatives around identity workflow automation using agents and orchestration systems.
Lead initiatives around internal copilots for IAM operations and knowledge support.
Lead initiatives around AI-assisted recommendations for access hygiene and remediation.
Lead initiatives around MCP-enabled identity tooling and integrations.
Ensure safe adoption of AI by applying human-in-the-loop approval controls.
Ensure safe adoption of AI by applying least-privilege access to tools and data.
Ensure safe adoption of AI by applying logging and auditability for AI-assisted workflows.
Ensure safe adoption of AI by applying prompt and data handling safeguards.
Ensure safe adoption of AI by applying clear separation between recommendations and privileged actions.
Partner with engineering, platform, IT, and studio teams to align IAM strategy with Scopely’s operational and business goals.
Provide expert guidance on modern IAM architecture.
Provide expert guidance on federated identity design.
Provide expert guidance on least-privilege engineering.
Provide expert guidance on Zero Trust access models.
Provide expert guidance on non-human identity risk.
Provide expert guidance on IAM automation strategy.
Provide expert guidance on Terraform design patterns for identity and access management.
Provide expert guidance on access governance in fast-growing environments.
Provide expert guidance on secure access design for engineering teams.
Provide expert guidance on safe use of AI in identity and access workflows.
Influence teams to adopt secure identity patterns.
Influence teams to automate IAM safely.
Influence teams to reduce reliance on manual access processes.
Influence teams to improve cloud and SaaS access consistency.
Influence teams to build scalable and maintainable identity controls.
Raise the bar for identity-aware security.
Raise the bar for automation-first IAM operations.
Raise the bar for practical access governance.
Raise the bar for engineering-driven IAM design.
Raise the bar for AI-assisted identity operations.

Requirements

8–12+ years in IAM security engineering, cloud security, identity architecture, or related security engineering roles.
Strong experience operating in cloud-first, high-scale environments.
Experience partnering directly with engineering, infrastructure, and security teams.
Experience designing and operating IAM solutions for global organizations with complex access needs.
Strong track record in identity modernization, least privilege, and access automation.
Proven experience building automation and reusable engineering patterns, not just handling manual IAM operations.
Experience with Britive, CyberArk, SailPoint, or similar PAM/PIM platforms (Bonus).
Experience with Okta Workflows, CIEM platforms, or identity governance tooling (Bonus).
Experience with Wiz, GuardDuty, Astrix, or similar tools for identity-related investigations (Bonus).
Experience in gaming, SaaS, or multi-studio environments (Bonus).
Experience with passwordless authentication, WebAuthn, or FIDO2 (Bonus).
Experience building AI-assisted workflows for IAM operations, documentation, access reviews, or investigations (Bonus).
Familiarity with AI security frameworks, governance, and safe agentic automation patterns (Bonus).
Security certifications such as CISSP, AWS Security Specialty, or relevant IAM/cloud certifications (Bonus).

Skills

AWS IAM
AWS Organizations
IAM Identity Center
SCPs
IAM roles and policies
CloudTrail
GuardDuty
IAM Access Analyzer
SSM
GCP IAM
service accounts
workload identity patterns
organization/folder/project models
audit services
Okta administration
groups
rules
app integrations
assignments
lifecycle management
troubleshooting
SAML
OIDC
OAuth
SCIM
federated identity design
Cross-account and cross-project access controls
Service account and workload identity governance
Twingate administration
ZTNA
remote access platforms
connectors
resources
access policies
Terraform
Infrastructure as Code
production IAM automation
reusable Terraform modules
Terraform state management
drift detection
rollback planning
safe deployment of IAM changes
Git-based workflows
pull requests
code review
Python
Bash
PowerShell
scripting languages
API integrations
workflow automation
provisioning and deprovisioning automation
access reporting
policy standardization
CI/CD integration
Policy-as-code
automation-first IAM
Claude Code
Codex
AI-assisted engineering tools
MCP integrations
agent-based automation workflows
AI-assisted detection
triage
remediation support
documentation
Prompt security
model safety
human-in-the-loop operational controls
Least privilege
role engineering
RBAC
ABAC
Identity threat modeling
Privileged access
JIT access models
Identity lifecycle management
Non-human identity risk reduction
Identity logging and monitoring
Access reviews
audit readiness
Security controls for SaaS and cloud identity systems
Builder mindset
Automation-first mentality
Systems thinker
AI-forward mindset
Pragmatic and engineering-oriented
High ownership
Strong communicator

Location

remote
hybrid (Barcelona)

Work Type

remote
hybrid

Experience Level

Senior

About the Company

Scopely is a leading video game and global interactive entertainment company, home to many of the world’s most beloved and enduring experiences, including two of the most successful mobile games of all-time “MONOPOLY GO!” and “Pokémon GO,” along with “Stumble Guys,” “Star Trek™ Fleet Command,” “MARVEL Strike Force,” “WWE Champions,” the Scrabble® franchise, “Yahtzee® With Buddies,” and many others.
Across mobile, web, PC, and console, Scopely creates, develops, publishes, and live-operates one of the most diversified and award-winning portfolios in the games industry — bringing hundreds of millions of players together through a shared love of play.
Founded in 2011, Scopely is powered by its exceptional team — including thousands of world-class gamemakers around the globe, a distinctive tenet-driven culture, and its proprietary technology platform, Playgami.
Together, these strengths have fueled Scopely’s position as the #1 mobile games company in the U.S. and #2 globally, generating more than $10 billion in lifetime revenue.
Whether building global sensations like “MONOPOLY GO!” from the ground up, or expanding through strategic acquisitions, including the FoxNext, GSN, and Scopely Explore games businesses — Scopely consistently delivers experiences players love today and return to for years to come.
Recognized multiple times as one of the "100 Most Influential Companies in the World" by TIME magazine and one of Fast Company's "World's Most Innovative Companies" and “Best Workplaces for Innovators,” Scopely believes that video games can be a force for good — creating meaningful connections, vibrant communities, and making life better through play.
Scopely has global operations and partners across four continents in more than a dozen countries worldwide.
For more information, visit: https://www.scopely.com/.
Scopely will never request payment or financial information during the application or hiring process.
Please apply only through our official website and verify that all Talent Partner communications come from an email address ending in @scopely.com.
Should you have any questions or encounter any fraudulent requests/emails/websites, please immediately contact recruiting@scopely.com.
Our job applicant privacy policies are available here: California Privacy Notice and EEA/UK Privacy Notice.

Equal Opportunity

Employment at Scopely is based solely on a person's merit and qualifications.
Scopely does not discriminate against any employee or applicant because of race, creed, color, religion, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition (including breastfeeding), or any other basis protected by law.
We also consider qualified applicants with arrest or conviction records, consistent with applicable federal, state and local law.