Identity & Access Management (Iam) Engineer

Match Point Solutions; São Paulo; Remote; BRL 174,000 - 247,000; Part time

Job summary

MatchPoint Solutions seeks an Identity & Access Management (IAM) Engineer to design, implement, automate, and support enterprise IAM solutions. Focus areas include Active Directory, Microsoft Entra ID, PAM, user lifecycle management, and automation via scripting to ensure secure access across enterprise systems.

This contract role emphasizes hands-on administration, scripting, and cross-team collaboration to ensure compliant identity management and secure access across cloud and on-prem

Qualifications

• 3+ years of Identity and Access Management experience.
• Strong Active Directory and Group Policy administration.
• Proficiency in PowerShell scripting and automation.
• Experience with Python, REST APIs, and JSON.
• Experience supporting CyberArk PAM.
• Knowledge of Entra ID (Azure AD), LDAP, SSO, MFA.
• Windows Server administration and troubleshooting.
• Excellent communication and documentation skills.

Responsibilities

• Administer and maintain Microsoft Active Directory, Group Policy, DNS, and related identity infrastructure.
• Support Microsoft Entra ID (Azure AD) and hybrid identity environments.
• Manage user provisioning, deprovisioning, access modifications, and role-based access controls.
• Develop and maintain automation solutions using PowerShell, Python, REST APIs, and other scripting technologies.
• Create, optimize, and execute Active Directory, LDAP, and security-related queries for operational support, audits, and reporting.
• Support CyberArk Privileged Access Management (PAM) platform, including onboarding, maintenance, patching, upgrades, and issue resolution.
• Investigate and resolve identity, authentication, authorization, and privileged access issues.
• Collaborate with Security, Infrastructure, Server, Application, and Cloud teams to implement IAM controls and standards.
• Conduct access reviews, entitlement audits, and compliance-related activities.
• Develop and maintain operational documentation, procedures, and technical runbooks.
• Monitor IAM systems, troubleshoot incidents, and support disaster recovery and business continuity requirements.
• Participate in IAM projects involving mergers, acquisitions, cloud migrations, and security initiatives.

Skills

Analytical skills

Troubleshooting

Documentation skills

Communication skills

Automation mindset

Education

Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or equivalent experience

Tools

PowerShell

Python

REST APIs

JSON

LDAP

Group Policy

CyberArk PAM

SSO

MFA

Azure Entra ID

Job description

MatchPoint Solutions is a fast-growing, young, energetic global IT-Engineering services company with clients across the US. We provide technology solutions to various clients like Uber, Robinhood, Netflix, Airbnb, Google, Sephora, and more! More recently, we have expanded to working internationally in Canada, China, Ireland, UK, Brazil, and India. Through our culture of innovation, we inspire, build, and deliver business results, from idea to outcome. We keep our clients on the cutting edge of the latest technologies and provide solutions by using industry-specific best practices and expertise.

Job Title: Identity & Access Management (IAM) Engineer

Location: Latam(Remote)

Employment Type: Contract

Pay Range: $30/hour

Position Summary

The Identity & Access Management (IAM) Engineer is responsible for designing, implementing, automating, and supporting enterprise identity and access management solutions. This role focuses on Active Directory, Microsoft Entra ID, Privileged Access Management (PAM), user lifecycle management, and automation through scripting to ensure secure, efficient, and compliant access to enterprise systems and applications.

Key Responsibilities

• Administer and maintain Microsoft Active Directory, Group Policy, DNS, and related identity infrastructure.
• Support Microsoft Entra ID (Azure AD) and hybrid identity environments.
• Manage user provisioning, deprovisioning, access modifications, and role-based access controls.
• Develop and maintain automation solutions using PowerShell, Python, REST APIs, and other scripting technologies.
• Create, optimize, and execute Active Directory, LDAP, and security-related queries for operational support, audits, and reporting.
• Support CyberArk Privileged Access Management (PAM) platform, including onboarding, maintenance, patching, upgrades, and issue resolution.
• Investigate and resolve identity, authentication, authorization, and privileged access issues.
• Collaborate with Security, Infrastructure, Server, Application, and Cloud teams to implement IAM controls and standards.
• Conduct access reviews, entitlement audits, and compliance-related activities.
• Develop and maintain operational documentation, procedures, and technical runbooks.
• Monitor IAM systems, troubleshoot incidents, and support disaster recovery and business continuity requirements.
• Participate in IAM projects involving mergers, acquisitions, cloud migrations, and security initiatives.

Required Qualifications

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or equivalent experience.
• 3+ years of experience in Identity and Access Management.
• Strong experience with Microsoft Active Directory and Group Policy administration.
• Proficiency in PowerShell scripting and automation.
• Experience with Python, REST APIs, JSON, or similar automation technologies.
• Experience supporting CyberArk or other Privileged Access Management solutions.
• Knowledge of Microsoft Entra ID (Azure AD), LDAP, SSO, MFA, and authentication protocols.
• Experience with Windows Server administration and troubleshooting.
• Strong analytical, problem-solving, and troubleshooting skills.
• Excellent communication and documentation skills.

Preferred Qualifications

• Experience with SailPoint, Saviynt, Okta, Ping Identity, or similar IAM platforms.
• Familiarity with Infrastructure as Code tools such as Terraform.
• Experience supporting cloud identity solutions within Azure, AWS, or GCP.
• Knowledge of security frameworks, compliance requirements, and audit processes.
• Relevant certifications such as Microsoft, CyberArk, CISSP, Security+, or IAM-related certifications.

Technical Knowledge

• Microsoft Active Directory
• Microsoft Entra ID (Azure AD)
• PowerShell
• Python
• LDAP Queries
• Group Policy (GPO)
• CyberArk PAM
• REST APIsSQL Reporting
• Windows Server
• Multi-Factor Authentication (MFA)
• Single Sign-On (SSO)
• Identity Lifecycle Management
• Access Governance
• Privileged Access Management (PAM)

Key Competencies

• Automation and process improvement
• Security-first mindset
• Troubleshooting and root cause analysis
• Continuous learning and innovation

MatchPoint Solutions provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.

This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.