City : Sant Just Desvern State : Barcelona (ES-B) Country : Spain (ES) Requisition Number : 45017 Overview: The PAM Specialist, is part of the broader Bunge Global Identity and Access Management (IAM) team. You will play a central role in supporting and evolving our Privileged Access Management (PAM) platform, a critical component of our cybersecurity posture. This position is primarily focused on ensuring the stability, security, and integration of privileged access services across a complex, global environment. You will work closely with directory and authentication platforms such as Active Directory and Entra ID, ensuring seamless integration between PAM and core identity services. In this role, you will directly contribute to strengthening privileged access controls and advancing identity foundations within a hybrid enterprise landscape. This position offers a unique opportunity to work on privileged access at a global scale, where PAM is a critical control for cybersecurity and compliance. You will play a direct role in strengthening the organization’s security posture while contributing to broader identity modernization initiatives. You will operate in a highly complex international environment, collaborating with global teams and contributing to initiatives with direct visibility within cybersecurity leadership. Main Responsibilities
1. Support and operate global Privileged Access Management (PAM) services, ensuring high availability, security, and performance
2. Manage and maintain directory services including Active Directory and Microsoft Entra ID, with a focus on enabling secure privileged access
3. Integrate PAM solutions with core identity services to ensure consistent and controlled management of privileged accounts across on-premises and cloud environments
4. Manage privileged account onboarding, access provisioning, session management, and credential lifecycle processes
5. Design and implement automation use cases for PAM operations, such as, Automated onboarding and offboarding of privileged accounts, Credential rotation and password vault synchronization, Just-in-time (JIT) privileged access provisioning Session initiation, monitoring and termination workflows
6. Integration with ticketing systems ServiceNow) for access requests and approvals
7. Oversee and optimize domain services such as authentication, replication, and domain trust relationships, in support of privileged access use cases
8. Support identity capabilities including Single Sign-On (SSO), Multi-Factor Authentication (MFA), and enterprise application integrations where they intersect with privileged access
9. Troubleshoot and resolve complex issues related to PAM, directory services, and authentication mechanisms
10. Collaborate with cybersecurity and infrastructure teams to enforce privileged access controls, audit requirements, and security best practices
11. Contribute to ongoing PAM enhancements, automation initiatives, and operational efficiency improvements
12. Explore opportunities for using Artificial Intelligence (AI) within the scope of IAM.
Education & Experience
13. Typically a Bachelor's degree in Computer Science, Information Technology, or a related technical field. A Master's degree is a plus
14. 5+ years of progressively responsible experience in PAM and Directory Services within a large, global enterprise environment
15. Working knowledge of PAM platforms CyberArk, Okta, Segura)
16. Strong understanding of PAM concepts including privileged account lifecycle, vaulting, session management, credential rotation, and least privilege enforcement
17. Experience building or supporting automation within PAM environments, preferably using scripting PowerShell) or API integrations
18. Experience integrating PAM solutions with Active Directory, Entra ID, and enterprise applications
19. Knowledge of privileged access controls, audit logging, and compliance requirements SOX, internal audit)
20. Relevant industry certifications such as MCSE: Core Infrastructure, Azure Administrator Associate, CISSP, ITIL Foundation, or equivalent are highly desirable
21. Solid understanding of DNS, DHCP, Group Policy, LDAP, and Kerberos protocols
22. Strong proficiency in scripting languages PowerShell) for automation, administration, and reporting
23. In-depth knowledge of Identity and Access Management (IAM) principles and best practices, particularly related to privileged access, MFA, and authentication
Languages
24. English (professional) required
25. Other languages Spanish) are a plus
#LI-MŚ1
Collaborative, Respectful, Inclusive
Agile, Empowered, Innovative
Safety, Sustainability, With Integrity