IAM Information Systems Engineer 2

WEX; São Paulo; Presencial; BRL 180 000 - 280 000; Tempo integral

Resumo da oferta

WEX in São Paulo seeks an experienced IAM engineer to autonomously build automated payload extraction and transformation pipelines (PowerShell, Python, SQL) to migrate business applications into SailPoint IGA.

You will partner with application teams to resolve data quality issues, implement RBAC/ABAC models, and automate processes with RPA and REST APIs while aligning with SOX/SoD rules to meet sprint deadlines.

Qualificações

• Experience in IAM engineering, payload integration, or directory automation.
• Ability to own application onboarding pipelines from discovery to production validation.
• Comfort working across multiple parallel integration tracks in a fast-paced environment.

Responsabilidades

• Develop and maintain data-transformation scripts (PowerShell, Python, SQL) for SailPoint ingestion.
• Collaborate with application teams to resolve data quality issues and ensure 100% WID correlation.
• Construct RBAC/ABAC models and replace unmanaged entitlements with role bundles.
• Automate manual processes with REST APIs, RPA, and self-service workflows.
• Educate owners on SOX/SoD rules and audit evidence standards to meet sprint deadlines.

Conhecimentos

PowerShell

Python

SQL

IAM engineering

REST/SCIM APIs

RPA

SailPoint IIQ/ISC

Active Directory/Entra ID

ITSM frameworks

Ferramentas

UiPath

Power Automate

SailPoint

Jira

Confluence

Descrição da oferta de emprego

Core Mission:

The engineering workhorse who autonomously builds automated payload extraction and transformation pipelines (PowerShell, Python, SQL) to migrate business applications into SailPoint IGA, influencing business Application Owners and managing multiple integration tracks concurrently.

Key Responsibilities & Deliverables

• Payload Engineering & Sanitization ('Connector Factory'): Develop and maintain PowerShell, Python, and SQL data-transformation scripts that extract, clean, and format messy application account/entitlement data into standardized SCIM, REST API, or JDBC payload packages for SailPoint ingestion.
• Application Payload Migration: Partner directly with decentralized business application teams to resolve data quality issues, eliminate non-standard local User IDs, and achieve 100% Workday WID account correlation prior to platform configuration.
• RBAC / ABAC Role Construction: Analyze sanitized entitlement payloads to build structured Role-Based and Attribute-Based Access Control models in SailPoint, replacing unmanaged static entitlements with business-friendly role bundles.
• Toil Elimination & Automation: Deploy PowerShell/Python scripts, REST API integrations, and RPA (Robotic Process Automation) bots to replace manual ticket-driven administrative processes with automated self-service workflows.
• Compliance Alignment & Stakeholder Influence: Act as a compliance ambassador; educate application owners on SOX/SOC rules, Segregation of Duties (SoD) risks, and audit evidence standards to secure cooperation and meet sprint integration deadlines.

Qualifications, Key Attributes & Technical Stack

• Experience: Experience in IAM engineering, payload integration, or directory automation.
• Self-Sufficiency & Autonomy: Highly self-directed problem solver who takes full ownership of application onboarding pipelines from discovery to production validation with minimal supervision.
• Multi-Tasking & Agility: Proven capability to manage and juggle multiple parallel application onboarding streams (3–5 apps concurrently), script development tasks, and operational escalations simultaneously in a high-velocity environment.
• Stakeholder Partnership & Influence: Strong collaborative partnership skills; ability to influence non-technical Application Owners to prioritize data sanitization, resolve correlation blockers, and meet sprint commitments.
• Technical Stack: Advanced PowerShell, Python, SQL, REST/SCIM APIs, RPA (UiPath / Power Automate), SailPoint (IIQ or ISC), Active Directory/Entra ID, and ITSM frameworks.