IAM Engineer SME

Fifty5Blue; São Paulo; Hybrid; BRL 180,000 - 260,000; Full time

Job summary

A Fifty5Blue procura um IAM Engineer SME para atuar como SME de identidade, governando serviços de identidade, segurança e excelência operacional em ambientes multi-cloud. Liderará o roadmap de identidade, incluindo Entra ID, Active Directory, Microsoft 365 e Google Workspace, assegurando autenticação e autorização seguras.

Você será responsável pela governança de acesso, gestão de privilégios, e por iniciativas de Zero Trust, com forte foco em automação, conformidade com LGPD e GDPR, e

Qualifications

• 8+ anos de experiência em infraestrutura, cibersegurança, IAM ou tecnologias em nuvem.
• 5+ anos de experiência prática com soluções IAM empresariais.
• Administração do Microsoft Entra ID (Azure AD) e Active Directory.
• Integração de identidade híbrida com Microsoft Entra Connect.
• Administração do Google Cloud Identity e Google Workspace.
• Experiência com SAML, OAuth 2.0, OpenID Connect, LDAP, Kerberos e SCIM.

Responsibilities

• Garantir disponibilidade, segurança, conformidade e escalabilidade dos serviços de identidade corporativos nos ambientes Microsoft e Google Cloud.
• Prover acesso seguro a aplicações e serviços em nuvem para a força de trabalho, alinhando-se a conformidade e transformação digital.
• Melhorar eficiência operacional via automação do ciclo de vida de identidade, governança de acesso e autoatendimento.
• Liderar adoção de tecnologias de identidade modernas como passwordless, governança de identidade e Zero Trust.
• Gestão de plataformas de identidade: Entra ID, AD, Google Cloud Identity/Workspace, integrações com SaaS e apps on-prem.

Skills

Identity management

Cloud security

SAML/OIDC

Zero Trust

Privileged Access Management

Automation (PowerShell)

Microsoft Entra ID/Azure AD

Education

Bacharelado em TI ou área relacionada

Tools

Terraform

Google Cloud APIs

Microsoft Graph API

PowerShell

Azure AD Connect

Job description

## IAM Engineer SMEApply: São Paulo, Avenida Francisco Matarazzo Ground Floor: Full time: Posted Today: End Date: December 21, 2026 (30+ days left to apply): R100805We help partners understand the changing advertising landscape. Specialising in audience measurement, consumer targeting and in-depth intelligence into paid, owned and earned media, their global coverage and local expertise enable better understanding of media audiences and their relationships with brands.**Job Details** **Certifique-se de anexar seu currículo atualizado e a ciência de seu gestor no ato da candidatura**! Serve as the organization's subject matter expert (SME) for Identity and Access Management (IAM), responsible for the governance, security, and operational excellence of identity services across Microsoft and Google Cloud ecosystems.Lead the design and evolution of secure, scalable, and compliant identity solutions supporting hybrid and multi-cloud environments. Act as the technical authority for authentication, authorization, privileged access management, identity governance, and Zero Trust security initiatives, ensuring alignment with cybersecurity, compliance, and digital transformation objectives.Own the enterprise identity roadmap and drive continuous improvement of identity platforms including Microsoft Entra ID, Active Directory, Microsoft 365, Google Cloud Identity, and Google Workspace, enabling secure access to enterprise applications, cloud services, and business-critical platforms.**Key Responsibilities:** **Business impact**• Ensure the availability, security, compliance, and scalability of enterprise identity services across Microsoft and Google Cloud environments.• Enable secure workforce access to applications and cloud services while supporting business growth, regulatory compliance, and digital transformation initiatives.• Improve operational efficiency through identity lifecycle automation, access governance, and self-service capabilities. **Strategic Leadership & Road mapping**• Drive adoption of modern identity technologies including passwordless authentication, identity governance, privileged access management, and Zero Trust security.• Partner with Infrastructure, Security, Application, and Enterprise Architecture teams to ensure alignment across technology initiatives. **Application Portfolio Ownership**• Manage enterprise identity platforms including Microsoft Entra ID, Active Directory, Microsoft 365 Identity Services, Google Cloud Identity, and Google Workspace.• Manage identity integrations for SaaS, cloud, and on-premises applications.Confidential• Oversee authentication, federation, authorization, provisioning, and access governance services.• Define standards for role-based access control (RBAC), privileged access, and identity lifecycle management **Enterprise Application Delivery, Operations & Governance**• Ensure operational excellence of identity management services through monitoring, automation, incident management, and continuous improvement.• Lead implementation and optimization of identity governance processes, including access reviews, entitlement management, and segregation of duties controls.• Provide expert-level support and escalation for complex identity-related incidents and strategic initiatives **Provide leadership and develop talent.**• Act as the technical authority and trusted advisor for identity management across the organization.• Mentor infrastructure, cloud, and security teams on identity architecture, security best practices, and operational excellence.• Establish and promote governance processes, and knowledge-sharing practices.• Support capability development within technical teams through coaching, training, and technical leadership **Required (skills and experience):** **Technical & Business Expertis**e• 8+ years of experience in infrastructure, cybersecurity, identity management, or cloud technologies.• 5+ years of hands-on experience with enterprise IAM solutions.• Advanced administration of Microsoft Entra ID (Azure AD) and Active Directory.• Hybrid identity integration using Microsoft Entra Connect.• Administration and governance of Google Cloud Identity and Google Workspace.• Expertise in authentication and federation technologies including SAML, OAuth 2.0, OpenID Connect, LDAP, Kerberos, and SCIM.• Strong understanding of Identity Governance & Administration (IGA), Privileged Identity Management (PIM), and Zero Trust architecture.• Experience with Conditional Access, MFA, Identity Protection, Access Reviews, Entitlement Management, and Privileged Access Governance.• Administration of Microsoft 365 services including Exchange Online, SharePoint Online, Teams, Intune, and Microsoft Defender.• Experience with identity lifecycle management, provisioning, deprovisioning, and access governance processes.• Strong automation skills using PowerShell, Microsoft Graph API, Google Cloud APIs, and Infrastructure as Code tools such as Terraform.• Experience supporting compliance frameworks including ISO 27001, NIST, SOX, LGPD, and GDPR.• Ability to translate business requirements into secure and scalable identity solutions. **Delivery**• Proven experience leading enterprise IAM initiatives and identity transformation programs.• Strong stakeholder management and communication skills across technical and business audiences.• Experience operating in global and multi-cultural environments.• Demonstrated ability to drive delivery, governance, and continuous service improvement.• Strong problem-solving, analytical, and decision-making capabilities.• Experience managing complex projects involving security, infrastructure, and cloud platforms.**Other Requirements**• Experience in a mid-to-large enterprise (or scaling organization).• Familiarity with ITIL, Agile, and modern delivery models.• Strong analytical and problem-solving capabilities.• Advanced English communication skills.• Advanced Spanish communication skills.• Ability to support global teams and international projects.**Preferred Qualifications**• Bachelor's Degree in Information Technology, Computer Science, Information Security, Systems Engineering, or a related field.• Microsoft Certified: Identity and Access Administrator Associate (SC-300).• Microsoft Certified: Azure Administrator Associate (AZ-104).• Microsoft 365 Certified: Enterprise Administrator Expert.• Google Professional Cloud Security Engineer.• Google Professional Cloud Architect.• Google Workspace Administrator Certification.• Experience with CyberArk, JumpCloud.• Background in identity transformation programs, cloud migrations, Zero Trust initiatives, or enterprise architecture.• Spanish language capabilities. **Candidaturas até 22/10/2026.**