IAM Engineer SME

Ibope; São Paulo; On-site; BRL 240,000 - 480,000; Full time

Job summary

IBOPE is seeking a senior IAM SME to govern identity services across Microsoft and Google Cloud ecosystems from São Paulo. You will own the enterprise identity roadmap, ensure security and compliance, and drive transformation in hybrid, multi-cloud environments.

Responsibilities include leading authentication, federation, provisioning, access governance, and RBAC standards, while mentoring teams on identity architecture and security best practices.

Qualifications

• 8+ years in infrastructure, cybersecurity, identity management, or cloud tech.
• 5+ years hands-on experience with enterprise IAM solutions.
• Advanced admin of Microsoft Entra ID (Azure AD) and Active Directory.
• Hybrid identity integration using Microsoft Entra Connect.
• Administration and governance of Google Cloud Identity and Google Workspace.
• Expertise in SAML, OAuth 2.0, OpenID Connect, LDAP, Kerberos, and SCIM.
• IGA, PIM, and Zero Trust knowledge.
• MFA, Access Reviews, Entitlement Management, Privileged Access Governance.
• Microsoft 365 suite administration (Exchange Online, SharePoint Online, Teams).
• Identity lifecycle management, provisioning, deprovisioning, and access governance.

Responsibilities

• Own enterprise identity roadmap and drive improvements across IAM platforms.
• Lead secure, scalable identity solutions for hybrid/multi-cloud environments.
• Govern authentication, federation, provisioning, and access governance services.
• Define RBAC, privileged access, and lifecycle management standards.
• Monitor, automate, and continuously improve identity services.
• Mentor teams on identity architecture and security best practices.
• Promote governance processes and knowledge sharing.
• Lead identity transformations and capability development within teams.

Skills

IAM governance

Zero Trust

SAML/OAuth/OpenID

PowerShell/Microsoft Graph API

Google Cloud Identity

Microsoft Entra ID (Azure AD)

Active Directory

OAuth 2.0

Provisioning/Deprovisioning

Identity lifecycle management

Education

Bachelor's Degree in IT/CS/InfoSec

Tools

Microsoft Entra ID (Azure AD)

Google Cloud Identity

Google Workspace

Microsoft 365 Identity Services

Terraform

Job description

Serve as the organization's subject matter expert (SME) for Identity and Access Management (IAM), responsible for the governance, security, and operational excellence of identity services across Microsoft and Google Cloud ecosystems.

Lead the design and evolution of secure, scalable, and compliant identity solutions supporting hybrid and multi-cloud environments. Act as the technical authority for authentication, authorization, privileged access management, identity governance, and Zero Trust security initiatives, ensuring alignment with cybersecurity, compliance, and digital transformation objectives.

Own the enterprise identity roadmap and drive continuous improvement of identity platforms including Microsoft Entra ID, Active Directory, Microsoft 365, Google Cloud Identity, and Google Workspace, enabling secure access to enterprise applications, cloud services, and business-critical platforms.

Key Responsibilities

Business impact

• Ensure the availability, security, compliance, and scalability of enterprise identity services across Microsoft and Google Cloud environments.
• Enable secure workforce access to applications and cloud services while supporting business growth, regulatory compliance, and digital transformation initiatives.
• Improve operational efficiency through identity lifecycle automation, access governance, and self-service capabilities.

Strategic Leadership & Road mapping

• Drive adoption of modern identity technologies including passwordless authentication, identity governance, privileged access management, and Zero Trust security.
• Partner with Infrastructure, Security, Application, and Enterprise Architecture teams to ensure alignment across technology initiatives.
• Manage enterprise identity platforms including Microsoft Entra ID, Active Directory, Microsoft 365 Identity Services, Google Cloud Identity, and Google Workspace.
• Manage identity integrations for SaaS, cloud, and on-premises applications.

Confidential

• Oversee authentication, federation, authorization, provisioning, and access governance services.
• Define standards for role-based access control (RBAC), privileged access, and identity lifecycle management

Enterprise Application Delivery, Operations & Governance

• Ensure operational excellence of identity management services through monitoring, automation, incident management, and continuous improvement.
• Lead implementation and optimization of identity governance processes, including access reviews, entitlement management, and segregation of duties controls.
• Provide expert-level support and escalation for complex identity-related incidents and strategic initiatives

Provide leadership and develop talent

• Act as the technical authority and trusted advisor for identity management across the organization.
• Mentor infrastructure, cloud, and security teams on identity architecture, security best practices, and operational excellence.
• Establish and promote governance processes, and knowledge-sharing practices.
• Support capability development within technical teams through coaching, training, and technical leadership

Required (skills and experience)

Technical & Business Expertise

• 8+ years of experience in infrastructure, cybersecurity, identity management, or cloud technologies.
• 5+ years of hands‑on experience with enterprise IAM solutions.
• Advanced administration of Microsoft Entra ID (Azure AD) and Active Directory.
• Hybrid identity integration using Microsoft Entra Connect.
• Administration and governance of Google Cloud Identity and Google Workspace.
• Expertise in authentication and federation technologies including SAML, OAuth 2.0, OpenID Connect, LDAP, Kerberos, and SCIM.
• Strong understanding of Identity Governance & Administration (IGA), Privileged Identity Management (PIM), and Zero Trust architecture.
• Experience with Conditional Access, MFA, Identity Protection, Access Reviews, Entitlement Management, and Privileged Access Governance.
• Administration of Microsoft 365 services including Exchange Online, SharePoint Online, Teams, Intune, and Microsoft Defender.
• Experience with identity lifecycle management, provisioning, deprovisioning, and access governance processes.
• Strong automation skills using PowerShell, Microsoft Graph API, Google Cloud APIs, and Infrastructure as Code tools such as Terraform.
• Experience supporting compliance frameworks including ISO 27001, NIST, SOX, LGPD, and GDPR.
• Ability to translate business requirements into secure and scalable identity solutions.

Delivery

• Proven experience leading enterprise IAM initiatives and identity transformation programs.
• Strong stakeholder management and communication skills across technical and business audiences.
• Experience operating in global and multi-cultural environments.
• Demonstrated ability to drive delivery, governance, and continuous service improvement.
• Strong problem‑solving, analytical, and decision‑making capabilities.
• Experience managing complex projects involving security, infrastructure, and cloud platforms.

Other Requirements

• Experience in a mid‑to‑large enterprise (or scaling organization).
• Familiarity with ITIL, Agile, and modern delivery models.
• Strong analytical and problem‑solving capabilities.
• Advanced English communication skills.
• Advanced Spanish communication skills.
• Ability to support global teams and international projects.

Preferred Qualifications

• Bachelor's Degree in Information Technology, Computer Science, Information Security, Systems Engineering, or a related field.
• Microsoft Certified: Identity and Access Administrator Associate (SC-300).
• Google Professional Cloud Security Engineer.
• Google Professional Cloud Architect.
• Experience with CyberArk, JumpCloud.
• Background in identity transformation programs, cloud migrations, Zero Trust initiatives, or enterprise architecture.