Senior IAM Analyst

Accountabilities:

• • Design, evolve, and maintain IAM architecture in alignment with security best practices and organizational requirements.
  • Develop and manage Role-Based Access Control (RBAC) models, including role modeling, role mining, Segregation of Duties (SoD), and role lifecycle management.
  • Define and enforce Privileged Access Management (PAM) controls for elevated and high-risk accounts.
  • Implement and maintain Identity Governance and Administration (IGA) processes, including access certifications, periodic reviews, and compliance controls.
  • Configure and administer IAM platforms such as Okta, Ping Identity, and Microsoft Entra ID.
  • Integrate internal and external applications securely with enterprise IAM solutions.
  • Develop and maintain automation for provisioning, deprovisioning, access reviews, and other identity workflows using Python, PowerShell, Bash, or similar technologies.
  • Operate IAM services in AWS environments and support the expansion of identity capabilities into Azure.
  • Apply secure identity and access management practices across multi-cloud environments.
  • Establish and maintain IAM governance, policies, standards, and regulatory compliance processes.
  • Support internal and external audits, access reviews, and other identity-related assurance activities.
  • Integrate IAM controls into DevSecOps and CI/CD pipelines, including secure management of service accounts, machine identities, and automated workloads.
  • Contribute to Zero Trust security initiatives and broader identity security improvements.
  • Collaborate with engineering, security, business, and audit stakeholders to deliver secure, efficient, and scalable identity workflows.

  Requirements:

  • Bachelor’s degree in Computer Science, Engineering, Information Systems, or a related field.
  • Based in Brazil and proficient in English at a B2 level or above.
  • Strong hands-on experience configuring and administering IAM platforms such as Okta, Ping Identity, or Microsoft Entra ID.
  • Solid understanding of RBAC methodologies, identity governance, access management, and privileged access controls.
  • Experience working with cloud environments for identity management and cybersecurity, with Azure knowledge considered an advantage.
  • Familiarity with authentication and authorization protocols, including SAML, OAuth 2.0, and OpenID Connect.
  • Experience with IAM integrations across enterprise applications and technology environments.
  • Proficiency in automation and scripting using Python, PowerShell, Bash, or comparable languages.
  • Experience integrating identity controls into DevSecOps and CI/CD environments, including service accounts, machine identities, and automated workloads.
  • Knowledge of Zero Trust Architecture and modern identity security practices.
  • Strong analytical and problem-solving capabilities, with the ability to investigate complex identity and access challenges.
  • Excellent communication skills and the ability to work effectively with technical teams, business stakeholders, and auditors.
  • Ability to work independently while collaborating effectively across distributed and multicultural teams.
  • Relevant certifications such as Okta Certified Professional, Ping Identity certifications, AWS Security Specialty, or Microsoft Identity and Access Administrator are a plus.

  Benefits:

  • Fully remote position based in Brazil.
  • Opportunity to work on enterprise-scale Identity and Access Management and cybersecurity initiatives.
  • Exposure to modern IAM platforms, including Okta, Ping Identity, and Microsoft Entra ID.
  • Hands-on experience across AWS and Azure cloud environments.
  • Opportunity to contribute to Zero Trust, DevSecOps, automation, and multi-cloud security initiatives.
  • Collaboration with distributed, multicultural, and cross-functional teams.
  • Opportunity to develop expertise in identity governance, privileged access, compliance, and security architecture.
  • Professional growth through exposure to complex technical and cybersecurity challenges.