Job Description

City : Sant Just Desvern State : Barcelona (ES-B) Country : Spain (ES) Requisition Number : 49176

Bunge has an exciting opportunity available for an IAM Authorization Specialist. In this role, you will be part of a global team working on challenging, meaningful projects impacting core business activities. Since 1818, Bunge has been connecting farmers to consumers to deliver essential food, feed, and fuel to the world. Looking to the future, our ambition is to continuously reinvent ourselves, leveraging data to be at the forefront of analytics, technology and talent to accomplish our purpose in a better, faster and simpler way. Bunge is committed to operating and thriving in the digital world – creating world class agile teams where teammates are empowered and encouraged to collaborate and test and learn to succeed.

At Bunge, people don’t just come here to work, they come here to grow – solving challenges that directly impact the world with a diverse team of thinkers and doers. Bunge offers a strong compensation and benefits package, generous paid time off program, flexible work arrangements, and opportunity to progress. Our hybrid work environment provides a balance of in-office and remote work.

Most importantly, in all we do we live our values:

• Act as One Team by fostering inclusion, collaboration, and respect
• Drive for Excellence by being agile, innovative and efficient
• Do What's Right by acting safely, ethically, and sustainably

Overview:

Join our Identity & Access Management team as an IAM Authorization Specialist and help shape the security and resilience of our global identity infrastructure. In this role, you’ll work with technologies including Active Directory, Entra ID, PKI, and certificate services, taking ownership of critical services, solving complex technical challenges, and driving improvements in security, automation, and reliability. You’ll have the opportunity to work independently, influence technical decisions, and collaborate with teams across Cybersecurity and IT.

Main Accountabilities:

• Manage projects and processes related to Active Directory, EntraID, and Public Key Infrastructure (PKI), following specific functional policy and broad procedures to achieve established goals.
• Responsible for the execution and ongoing support of key identity infrastructure and cryptographic security services, including on-premises Active Directory, enterprise PKI, certificate services
• Participate in small to medium-sized projects of moderate complexity, actively contributing to process improvements within the directory and domain services environment.
• Apply in-depth knowledge of Directory & Domain Services and basic knowledge of related disciplines to adapt departmental plans and recommend solutions and best practices.
• Analyze and resolve complex identity infrastructure issues involving Active Directory authentication, domain and forest services, certificate issuance and validation, certificate trust, and private key protection, including situations where established solutions or precedents may not exist.
• Contribute to the design, implementation, and maintenance of secure and efficient directory and domain services solutions.
• Provide leadership and technical guidance to other professionals and/or support staff on matters pertaining to Directory & Domain Services.
• Drive continuous improvement by identifying opportunities to automate administrative processes, strengthen security controls, improve monitoring, reduce manual certificate and key management activities, and increase service resiliency.

Knowledge and Technical Competencies:

• Bachelor's degree (Master's may be required at higher levels) with between 11 - 14 years of position-related functional experience, or an equivalent combination of education and experience
• In-depth knowledge of Directory Services (e.g., Active Directory, LDAP, Azure AD) and Domain Management.
• Strong understanding of enterprise PKI concepts and Microsoft Active Directory Certificate Services (AD CS), including certificate authorities, registration authorities, certificate templates, certificate issuance, renewal, revocation, trust chains, CRLs, and OCSP.
• Understanding of certificate-based authentication and how certificates and PKI integrate with Active Directory, applications, infrastructure platforms, and modern identity environments.
• Knowledge of security principles applicable to identity infrastructure, including least privilege, separation of duties, privileged access management, tiered administration, auditing, and protection of highly privileged infrastructure.
• Basic knowledge of related disciplines such as networking, server infrastructure, and cloud computing.
• Understanding of cybersecurity, audit, and compliance requirements applicable to identity systems, certificate authorities, and cryptographic key management.
• Strong communication and interpersonal skills, with the ability to lead technical discussions, document complex solutions, and collaborate effectively with infrastructure, cybersecurity, application, and architecture teams.
• Ability to perform complex analysis and support the delivery of solutions to intricate technical problems.
• Proficiency in managing projects and processes with limited oversight.
• Understanding of cybersecurity best practices and compliance requirements relevant to directory services.
• Fluency in English is required; additional languages are considered a plus.

#LI-MP1

At Bunge (NYSE: BG), our purpose is to connect farmers to consumers to deliver essential food, feed and fuel to the world. As a premier agribusiness solutions provider, our team of ~34,000 dedicated employees partner with farmers across the globe to move agricultural commodities from where they’re grown to where they’re needed—in faster, smarter, and more efficient ways. We are a world leader in grain origination, storage, distribution, oilseed processing and refining, offering a broad portfolio of plant-based oils, fats, and proteins. We work alongside our customers at both ends of the value chain to deliver quality products and develop tailored, innovative solutions that address evolving consumer needs. With 200+ years of experience and presence in over 50 countries, we are committed to strengthening global food security, advancing sustainability, and helping communities prosper where we operate. Bunge has its registered office in Geneva, Switzerland and its corporate headquarters in St. Louis, Missouri. Learn more at Bunge.com.

Every day our people exemplify these values, which represent Bunge at its core:

• We Are One Team – Collaborative, Respectful, Inclusive
• We Lead The Way – Agile, Empowered, Innovative
• We Do What’s Right – Safety, Sustainability, With Integrity

If this sounds like you, join us! We value and invest in people who believe in our purpose and are excited to live it every day – people who are #ProudtoBeBunge