Security Engineer

The Punta Gorda Garden Club, Inc.; Argentina; Remote; ARS 91,242,000 - 152,070,000; Full time

Job summary

Solvd Inc. is seeking a mid-tier Security Engineer specializing in IAM and data governance to join our Cyber Security team.

You will design, implement, and secure our identity perimeter and SaaS ecosystem, owning the Okta environment and driving governance across Google Workspace, Microsoft 365, Slack, Salesforce, and GitHub. The role emphasizes least privilege, lifecycle automation, and collaboration with the SOC to ensure compliant security postures, with impact on enterprise-scale AI-driven

Qualifications

• 3–5 years of dedicated experience in a Security Engineering, IAM, or Systems Engineering role with a heavy security focus.
• Strong engineering-level knowledge of Okta (Okta Certified Administrator or Certified Consultant preferred).
• Experience with data governance principles, data loss prevention (DLP), and zero-trust access models.
• Core networking and identity protocols: TCP/IP, HTTP, SAML, OAuth, OIDC, SCIM.
• Proficiency in Python, PowerShell, or Bash to interact with REST APIs for security tooling.
• Experience querying logs (Splunk, ELK, SQL, or cloud-native SIEMs) to investigate identity-related security incidents.

Responsibilities

• Okta Architecture & Admin: primary engineer for Okta configurations including authorization servers, adaptive MFA, and conditional access policies.
• Lifecycle Automation: design and maintain JML workflows using Okta Workflows, SCIM, or API scripts.
• Federation & Protocols: implement SSO integrations using SAML 2.0, OIDC, and OAuth 2.0.
• Least Privilege Enforcement: design RBAC/ABAC models across SaaS platforms.
• Data Exposure Mitigation: monitor and remediate unauthorized data sharing and shadow IT integrations.
• Access Reviews & Compliance: lead quarterly user access reviews and support SOC 2 Type II, ISO 27001, and GDPR.
• SSPM: continuously audit and harden SaaS configurations.
• Threat Detection: analyze Okta and SaaS logs to detect anomalous activity and exfiltration.
• SIEM Integration: collaborate with SOC to ingest IAM and SaaS logs into SIEM for alerts.

Skills

Okta Mastery

Security Mindset

Core Protocols

Scripting (Python/PowerShell/Bash)

Log Analysis

IAM/Security Eng experience

Tools

Splunk

ELK

SQL

SIEM

Okta Admin Console

Job description

Solvd: Security Engineer II – IAM & SaaS Governance

Mid Posted 2 months ago We Work Remotely — Programming

Mid Posted 2 months ago We Work Remotely — Programming Security

AI summary:Security engineer designs and manages IAM infrastructure, Okta environments, and SaaS data governance while enforcing least privilege access controls.

Solvd Inc. is a rapidly growing AI-native consulting and technology services firm delivering enterprise transformation across cloud, data, software engineering, and artificial intelligence. We work with industry-leading organizations to design, build, and operationalize technology solutions that drive measurable business outcomes.

Following the acquisition of Tooploox, a premier AI and product development company, Solvd now offers true end-to-end delivery—from strategic advisory and solution design to custom AI development and enterprise-scale implementation. Our capability centers combine deep technical expertise, proven delivery methodologies, and sector-specific knowledge to address complex business challenges quickly and effectively.

We are looking for a Mid-Tier Security Engineer specializing in Identity and Access Management (IAM) and Data Governance to join our Cyber Security team. In this role, you won't just be managing user tickets; you will be the engineer designing, implementing, and securing our identity perimeter and SaaS ecosystem.

You will own our Okta environment and drive data governance strategies across our core SaaS applications (e.g., Google Workspace, Microsoft 365, Slack, Salesforce, GitHub). Your goal is to ensure seamless user lifecycle management while aggressively enforcing the principle of least privilege and monitoring data exposure.

What you'll do

Identity & Access Management (IAM) Engineering

Okta Architecture & Admin: Act as the primary engineer for Okta, managing advanced configurations including custom authorization servers, adaptive MFA, and conditional access policies.

Lifecycle Automation: Design and maintain automated joiner-mover-leaver (JML) workflows using Okta Workflows, SCIM, or custom API scripts to eliminate manual provisioning errors.

Federation & Protocols: Standardize and implement SSO integrations utilizing SAML 2.0, OIDC, and OAuth 2.0, ensuring secure token exchange and scoping.

Data Governance & SaaS Security

Least Privilege Enforcement: Design, audit, and refine Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC) models across all enterprise SaaS platforms.

Data Exposure Mitigation: Monitor and remediate unauthorized data sharing, public file exposure, and "shadow IT" API integrations within our SaaS ecosystem.

Access Reviews & Compliance: Lead quarterly user access reviews (UARs) and provide evidentiary support for security frameworks such as SOC 2 Type II, ISO 27001, and GDPR.

SaaS Security Posture Management (SSPM): Leverage SSPM tools or native security centers to continuously audit and harden SaaS application configurations.

Threat Detection: Analyze Okta System Logs and SaaS audit logs to detect anomalous behavior (e.g., impossible travel, credential stuffing, unauthorized data exfiltration).

SIEM Integration: Collaborate with the SOC team to ensure critical IAM and SaaS logs are correctly ingested into our SIEM for real-time alerting.

What you bring

Experience: 3–5 years of dedicated experience in a Security Engineering, IAM, or Systems Engineering role with a heavy security focus.

Okta Mastery: Strong engineering-level knowledge of Okta (Okta Certified Administrator or Certified Consultant preferred).

Security Mindset: Proven track record of implementing data governance principles, data loss prevention (DLP), and zero-trust access models.

Core Protocols: Deep understanding of networking and identity protocols: TCP/IP, HTTP, SAML, OAuth, OIDC, and SCIM.

Scripting: Proficiency in Python, PowerShell, or Bash to interact with REST APIs for custom security tooling and automation.

Log Analysis: Experience querying logs (Splunk, ELK, SQL, or cloud-native SIEMs) to investigate identity-related security incidents.

Shape real-world AI-driven projects across key industries, working with clients from startup innovation to enterprise transformation.

Be part of a global team with equal opportunities for collaboration across continents and cultures.

Thrive in an inclusive environment that prioritizes continuous learning, innovation, and ethical AI standards.