Manage, evolve, and support Identity and Access Management (IAM) solutions, ensuring security, compliance, and alignment with business objectives.
Implement, maintain, and enhance identity and access governance solutions, including automation of provisioning, deprovisioning, and access reviews.
Work on the integration of systems, applications, and Privileged Access Management (PAM) solutions.
Define and enforce access control policies, such as RBAC and Segregation of Duties (SoD).
Support and operate authentication mechanisms, SSO, MFA, and identity federation, especially in cloud environments.
Ensure operational support of the platform, including monitoring, troubleshooting, and incident response.
Support audits and regulatory compliance requirements (LGPD, ISO, PCI, among others).
Act as a technical reference, collaborating with internal teams, partners, and vendors.
Communicate risks, outcomes, and progress of IAM initiatives to stakeholders and leadership.
Contribute to the definition of the strategic identity security roadmap aligned with the organization’s objectives.

Experience in Identity and Access Management (IAM), with a focus on governance, automation, and security.
Knowledge of SailPoint solutions, especially IdentityNow, including integrations, workflows, access certifications, and identity lifecycle management.
Experience with Privileged Access Management (PAM) solutions such as CyberArk, BeyondTrust, or Segura.
Experience defining and enforcing access governance policies, including RBAC and Segregation of Duties (SoD).
Knowledge of authentication and identity federation protocols such as SAML, OAuth2, and OpenID Connect.
Experience with SSO, MFA, and cloud environments, particularly Azure and Entra ID.
Ability to support the operational maintenance of security platforms, performing troubleshooting, log analysis, incident management, and updates.
Bachelor's degree in Information Technology, Information Security, Information Systems, or related fields.
Courses or training in:
Identity & Access Management (IAM)
Information Security
Governance, Risk and Compliance (GRC)
Cloud Security (especially Azure)
Certifications:
SailPoint (IdentityIQ / IdentityNow – Engineer or Architect)
CISSP (Certified Information Systems Security Professional)
CIAM (Certified Identity and Access Manager) or equivalent
PAM solution certifications such as CyberArk, BeyondTrust, or Segura
Cloud and identity certifications, such as Microsoft (Azure / Entra ID)

Public transport voucher and/or shuttle service for positions at our distribution centers (DCs)*
Meal/Food voucher
Christmas grocery voucher
Home office allowance (for hybrid or remote employment contracts)*
Multi-use company credit card
Employee discount at our stores
Health insurance
Dr. Be (telemedicine, telepsychology, nutritional coaching, and sports coaching)
Wellhub (Gympass)
Programs and campaigns designed to promote the health and wellbeing of our employees and their families
Balance methodology applied with leadership and teams to strengthen communication and recognition, wellbeing, and work style/tools
Dental plan
Univers – discounts at Raia and Drogasil pharmacies
Pet health plan
Running coaching
Discounts at universities, schools, language courses, and vocational training
Discounted tickets for cinemas, parks, and more
People with disabilities are welcome to apply to all our opportunities.

Information Security Specialist – IAM

Key skills