IAM Analyst

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior IAM Analyst based in Brazil.

This is a senior cybersecurity role focused on designing, implementing, and maintaining secure identity and access management capabilities across complex technology environments.

• Design, evolve, and maintain IAM architecture in alignment with security best practices and organizational requirements.
• Develop and manage Role-Based Access Control (RBAC) models, including role modeling, role mining, Segregation of Duties (SoD), and role lifecycle management.
• Define and enforce Privileged Access Management (PAM) controls for elevated and high-risk accounts.
• Implement and maintain Identity Governance and Administration (IGA) processes, including access certifications, periodic reviews, and compliance controls.
• Configure and administer IAM platforms such as Okta, Ping Identity, and Microsoft Entra ID.
• Integrate internal and external applications securely with enterprise IAM solutions.
• Develop and maintain automation for provisioning, deprovisioning, access reviews, and other identity workflows using Python, PowerShell, Bash, or similar technologies.
• Operate IAM services in AWS environments and support the expansion of identity capabilities into Azure.
• Apply secure identity and access management practices across multi-cloud environments.
• Establish and maintain IAM governance, policies, standards, and regulatory compliance processes.
• Support internal and external audits, access reviews, and other identity-related assurance activities.
• Integrate IAM controls into DevSecOps and CI/CD pipelines, including secure management of service accounts, machine identities, and automated workloads.
• Contribute to Zero Trust security initiatives and broader identity security improvements.
• Collaborate with engineering, security, business, and audit stakeholders to deliver secure, efficient, and scalable identity workflows.

• Bachelor’s degree in Computer Science, Engineering, Information Systems, or a related field.
• Based in Brazil and proficient in English at a B2 level or above.
• Strong hands-on experience configuring and administering IAM platforms such as Okta, Ping Identity, or Microsoft Entra ID.
• Solid understanding of RBAC methodologies, identity governance, access management, and privileged access controls.
• Experience working with cloud environments for identity management and cybersecurity, with Azure knowledge considered an advantage.
• Familiarity with authentication and authorization protocols, including SAML, OAuth 2.0, and OpenID Connect.
• Experience with IAM integrations across enterprise applications and technology environments.
• Proficiency in automation and scripting using Python, PowerShell, Bash, or comparable languages.
• Experience integrating identity controls into DevSecOps and CI/CD environments, including service accounts, machine identities, and automated workloads.
• Knowledge of Zero Trust Architecture and modern identity security practices.
• Strong analytical and problem-solving capabilities, with the ability to investigate complex identity and access challenges.
• Excellent communication skills and the ability to work effectively with technical teams, business stakeholders, and auditors.
• Ability to work independently while collaborating effectively across distributed and multicultural teams.
• Relevant certifications such as Okta Certified Professional, Ping Identity certifications, AWS Security Specialty, or Microsoft Identity and Access Administrator are a plus.

• Fully remote position based in Brazil.
• Opportunity to work on enterprise-scale Identity and Access Management and cybersecurity initiatives.
• Exposure to modern IAM platforms, including Okta, Ping Identity, and Microsoft Entra ID.
• Hands-on experience across AWS and Azure cloud environments.
• Opportunity to contribute to Zero Trust, DevSecOps, automation, and multi-cloud security initiatives.
• Collaboration with distributed, multicultural, and cross-functional teams.
• Opportunity to develop expertise in identity governance, privileged access, compliance, and security architecture.
• Professional growth through exposure to complex technical and cybersecurity challenges.