Design, evolve, and maintain the companys IAM architecture aligned with security best practices.
Implement and maintain RBAC (Role-Based Access Control) models.
Manage and configure IAM tools such as Okta and Ping Identity.
Ensure secure integration of internal and external applications with IAM solutions.
Develop automation scripts for provisioning, deprovisioning, and access reviews using Python, PowerShell, or similar languages.
Operate IAM services within AWS and support expansion into Azure.
Apply secure identity practices across multi‑cloud environments.
Implement and maintain IAM governance, policies, and regulatory compliance processes.
Support internal and external audits and access review cycles.
Collaborate with engineering, security, and business teams to ensure secure and efficient identity workflows.

Be based in Brazil.
English (B2).
Bachelors degree in computer science, Engineering, Information Systems, or related field.
Solid hands on experience with IAM platforms, including Okta, Ping Identity or Microsoft Entra ID.
Strong knowledge of RBAC methodologies and access management practices.
Experience with cloud environments, Azure knowledge preferred.
Familiarity with authentication and authorization protocols (SAML, OAuth 2.0, OpenID Connect).
Ability to work independently as well as in distributed, multicultural teams.
Strong analytical and communication skills for interaction with business, technical teams, and auditors.
Experience integrating IAM controls into DevSecOps or CI/CD pipelines.

Systems Administrator, IAM

Key skills