Iam Expert In Cybersecurity

Stellantis; Betim; On-site; BRL 120,000 - 210,000; Full time

Job summary

Stellantis, líder global em automóveis, busca profissional para atuar no time de Cybersecurity em Betim (MG). Foco na governança, operação e offboarding de identidades utilizadas por agentes e componentes de automação, assegurando conformidade e auditoria robusta.

O papel exige experiência com IAM, padrões de acesso e integração via APIs, além de inglês avançado. A vaga é presencial em Betim, com responsabilidade de publicar padrões e runbooks operacionais.

Qualifications

• Conhecimento sólido em gestão de ciclo de vida de identidades, incluindo identidades não humanas.
• Conceitos de IAM (RBAC, ABAC, entitlements, workflows de aprovação).
• Experiência com OAuth2, OIDC, SAML, SCIM e diretórios.
• Conhecimento de padrões de acesso privilegiado, Just-in-Time e Just-enough.
• Experiência com integrações via API e análise de logs.
• Formação superior em área tecnológica.
• Proeficiência em inglês avançado.
• Disponibilidade para atuar presencialmente em Betim, MG, Brasil.

Responsibilities

• Design e mantenha o framework de Governança de Identidade de Agentes.
• Defina o lifecycle de identidades de agentes: criação, onboarding, mudanças e desativação.
• Modelos de acesso com least privilege, separação de funções.
• Defina conjuntos padrão de permissões e guardrails para sistemas e APIs.
• Integrar identidades de agentes com controles de acesso privilegiado quando necessário.
• Definir procedimentos de break-glass e de emergência para fluxos de agentes.
• Implementar logging, monitoramento e evidências auditáveis.
• Publicar padrões, diretrizes e runbooks operacionais.

Skills

Identity lifecycle

IAM concepts

OAuth2/OIDC/SAML/SCIM

Just-in-time access

Just-enough access

API integration

Log analysis

Education

Bacharelado em área tecnológica

Job description

Stellantis is one of the global leaders in the development and production of automobiles and light commercial vehicles, as well as in providing mobility solutions. We are one of the world’s leading Mobility Tech Companies, bringing together iconic brands such as Fiat, Jeep, Peugeot, Citroën, RAM, and Abarth. With operations in nearly 30 countries and presence in over 130 markets, we offer clean, connected, accessible, and safe mobility solutions.

What drives us is the talent and diversity of our people, who transform passion and experience into value for our customers, communities, and partners every day. We are looking for individuals who are passionate about automobiles, technology, and innovation to join our team!

This role is part of the Cybersecurity team and focuses on the design, governance, and operation of identities used by AI agents and automation components. The person in this position will ensure secure, compliant, and auditable interactions between agentic systems and enterprise platforms, applying strong identity governance and least-privilege principles.

Main Responsibilities:

• Design and build the Agent Identity Governance Framework, including standards, approval models, lifecycle rules, and access catalogues;
• Define and enforce the lifecycle of agent identities, including creation, onboarding, changes, and decommissioning;
• Design access models for agent identities using least privilege, separation of duties, and time-bound access;
• Define standard permission sets and guardrails for systems, APIs, and allowed operations;
• Integrate agent identities with privileged access management controls when required;
• Define break-glass and emergency procedures for agent workflows;
• Implement logging, monitoring, and audit-ready evidence for agent identity activities;
• Publish standards, guidelines, and operational runbooks for secure agent identity management.

Requisitos:

We expect you to have:

• Strong knowledge of identity lifecycle management for non-human identities;
• Solid understanding of identity and access management concepts such as RBAC, ABAC, entitlements, and approval workflows;
• Experience with identity standards and protocols such as OAuth2, OIDC, SAML, SCIM, and directory services;
• Knowledge of privileged access patterns, including just-in-time and just-enough access;
• Experience with API-based integrations and log analysis;
• Bachelor’s degree completed in a technology-related field or equivalent;
• Advanced English proficiency;
• Availability to work onsite in Betim (MG), Brazil.

It will be considered a plus if you have:

• Familiarity with policy-as-code and automation pipelines;
• Knowledge of identity risks related to AI and agentic systems;
• Experience with LLM-based applications and agent orchestration concepts;
• Understanding of secrets management and credential protection;
• Exposure to machine learning operations tooling.