Identity & Access Management Security Engineer (m/f/d)

We are expanding our Global Corporate Information Security Team and looking forward new colleagues joining our teams:

The IAM Security Engineer (m/f/d) is responsible for implementing, managing, and securing identity and access management solutions across an organization. They ensure that users, systems, and applications have appropriate access while minimizing security risks.

We’re looking for an IAM Security Engineer to join our growing global team in Madrid and help implement, secure, and evolve the digital backbone of our enterprise. This is your chance to make an impact on projects that touch every corner of our organization—while working in a modern environment that values both collaboration and flexibility.

The working location for this position will be in Madrid city where we are setting up a new office. We operate a hybrid model, requiring at least 40% of the working time spent on-site on a weekly basis.

• Implement and Manage Role-Based Access control (RBAC), Least Privileged Access Principles.
• Implement and Oversee IAM Solutions such as Multi-Factor Authentication (MFA), Single Sign-On (SSO), Priviledge Access Management (PAM).
• Consult to application and dev teams for secure utilization of IAM capabilities (e.g. SAML, OAuth).
• Develop and Contribute to IAM related policies, procedures and guidelines aligned with ISO 27001, NIST, GDPR.
• Participate in incident response activities for IAM-related security incidents, Investigate and remediate unauthorized access attempts.
• Conduct IAM Security Assessments, IAM Governance Reviews, Optimize IAM Across Cloud and on-premise Environments.
• Collaborate with stakeholders (IT, DevOps, HRIT, IS Teams) in ensuring security for IAM in complex hybrid environments.

• Bachelor’s/Master’s in Cybersecurity, Computer Science, or related field.
• 3+ years in cybersecurity, preferrably as IAM Security Engineer.
• Following certificates are preferred; CISSP or CISM.
• English is a Must, German and French are a plus.
• Knowledge in related protocols (e.g. SAML, Kerberos, OAuth, LDAP, Radius, …).
• Knowledge in scripting and querying (e.g. Python, PowerShell, …).
• Hands-on experience with IAM platforms and applications.
• Good understanding of access control frameworks.

At Liebherr, we believe people are at the heart of our success. As part of our international team, you’ll enjoy a secure role in a family-owned company that values innovation, collaboration, and long-term career growth:

• Competitive compensation and benefits package that recognizes your expertise
• Flexible and hybrid working model
• Creative freedom and responsibility to shape processes and solutions in our global transformation
• Continuous learning and development with tailored training and certification opportunities
• Meal vouchers
• Life and accident insurance
• Option to include a premium private health insurance package as part of the flexible remuneration
• A safe, stable, and international workplace within a trusted family business that invests in people

Please apply only via the online application form, otherwise we cannot consider your application.

Please note that we do not accept applications via recruitment agencies for this position.

Have we awoken your interest? Then we look forward to receiving your online application. If you have any questions, please contact Karoliina Rissanen.

One Passion. Many Opportunities.