Principal Security Engineer – Identity & Access

Dlocal LLP; Buenos Aires; Hybrid; ARS 181,906,000 - 272,860,000; Full time

Job summary

dLocal is building a modern identity security program and seeks a Principal Security Engineer – Identity & Access to drive it. You will shape the strategy and practically implement scalable identity governance.

You will own the JML, SoD, federation using SAML/OAuth2/OIDC, with Zero Trust and Adaptive MFA, collaborating with global teams to secure access across cloud, on-prem, and SaaS.

Qualifications

• Strong hands-on experience engineering identity lifecycle and access control at scale.
• Experience with JML, SoD, and automated IGA implementations.
• Proven track record delivering identity governance in fast-growing fintech environments.
• Experience integrating identity during mergers and acquisitions.

Responsibilities

• Engineer automated JML pipelines and access certifications.
• Design and scale federation, MFA, and Zero Trust across cloud, SaaS, and on-prem.
• Lead identity integration for M&A and enterprise transformations.
• Implement self-service governance and measurable identity KPIs.

Skills

Identity & Access

Zero Trust

RBAC

IGA

JML

SoD

MFA

SAML

OAuth2

OIDC

SCIM

M&A Identity

Tools

SAML

OAuth2

OIDC

SCIM

Job description

Why should you join dLocal?

dLocal enables the biggest companies in the world to collect payments in 40 countries in emerging markets. Global brands rely on us to increase conversion rates and simplify payment expansion effortlessly. As both a payments processor and a merchant of record where we operate, we make it possible for our merchants to make inroads into the world’s fastest-growing, emerging markets.

By joining us you will be a part of an amazing global team that makes it all happen. Being a part of dLocal means working with 1000+ teammates from 30+ different nationalities and developing an international career that impacts millions of people’s daily lives. We are builders, we never run from a challenge, we are customer-centric, and if this sounds like you, we know you will thrive in our team.

About Us & The Role

We are not building a traditional, bureaucratic identity and access management function. We are building a modern, highly automated identity security program-and we need a sharp, relentless operator to build it.

Identity is the new perimeter, and managing how our global workforce accesses enterprise systems is one of our highest priorities. We are looking for a Principal Security Engineer – Identity & Access to help drive our identity evolution alongside our existing senior engineering team. You will be walking into a rapidly evolving ecosystem that has outgrown its early identity frameworks. Your mandate is to take that complex web of legacy entitlements and build a highly scalable, automated identity governance machine.

This is not an "ivory tower" strategy role. We do not need someone to draw Visio diagrams and hand them off to junior admins. We need a pragmatic, high-agency builder who helps design the strategy but has the zero-ego grit to execute it with their own hands.

What You’ll Do

• Engineer the Identity Lifecycle (JML & SoD): Take on our workforce identity and access ecosystem. You will engineer a highly automated Joiner-Mover-Leaver (JML) machine, implementing robust access certifications, Separation of Duties (SoD), and unified IGA frameworks that scale with our hyper-growth.

• Federation, Zero Trust & Integration: Design and scale our authentication and authorization foundations across cloud, SaaS, and on-premise environments. You will lead identity federation leveraging SAML, OAuth2, OpenID Connect, and SCIM, while driving the adoption of Zero Trust architecture and Adaptive MFA across the enterprise.

• M&A & Enterprise Transformation: As a rapidly expanding global fintech, we acquire and scale. You will lead the identity integration strategy for mergers, acquisitions, and massive enterprise transformation initiatives, securely and seamlessly folding new organizations into our identity ecosystem.

• Zero-Ego Execution: As a senior technical anchor on the team, you lead by example. You will get your hands dirty. You will configure the integrations, write the RBAC policies, engineer the IGA platforms, and untangle access flows yourself.

• Codify Governance & Shift Left: You will design self-service identity workflows, automated controls, and identity KPIs that force business leaders (the first line of defense) to explicitly own and accept their access risks. You translate written compliance policies into code.

• Be the IAM Diplomat: When you change how developers and commercial teams authenticate, there is