IT Operations Analyst

Jobgether SRL; Brasil; On-site; BRL 120,000 - 180,000; Full time

Benefits offered by this job

Fully remote work

Lifestyle subsidy

Work-from-home setup allowance

Learning & Development allowance

Paid parental leave

Health insurance

AI tools access

Top-spec laptop

AI/LLM-assisted workflows

Global tech environment

Job summary

Lever, Inc. is seeking an IT Operations Analyst based in Brazil to own and improve the technology environment for secure and efficient work.

You will focus on identity, endpoints, SaaS administration, device management, and secure access, with a heavy emphasis on automation using code, APIs, IaC, and AI-assisted workflows. You’ll establish mature service management practices around incidents, changes, documentation, metrics, and operational readiness while maintaining reliability and scalability

Qualifications

• Demonstrated experience automating IT operations and building scalable tooling.
• Hands-on with SaaS identity, endpoint management, and secure access principles.
• Experience with Zero Trust technologies and modern authentication mechanisms.
• Proven ability to reduce recurring manual work through internal tools.

Responsibilities

• Own lifecycle of corporate technology including identities, endpoints, and SaaS apps.
• Improve identity and access environments with IdPs, SSO, SAML, SCIM, DNS, certificates.
• Operate Zero Trust capabilities and secure access policies across environments.
• Build automation tooling using Python, REST APIs, Terraform, and AI-assisted workflows.
• Establish and improve service management practices (incidents, changes, metrics).

Skills

Automation mindset

Python

Scripting

Zero Trust

Identity security

macOS administration

Tools

Okta

Entra

MDM

Google Workspace

SAML

Job description

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for an IT Operations Analyst based in Brazil.

This is an engineering-focused IT operations role responsible for building and improving the technology environment that enables employees to work securely and efficiently.
You’ll own key areas including identity, endpoints, SaaS administration, device management, and secure access.
A major focus will be automation—using code, APIs, infrastructure-as-code, and AI-assisted workflows to eliminate repetitive operational work.
You’ll also help establish mature service management practices around incidents, changes, documentation, metrics, and operational readiness.
The role combines reliability, security, and continuous improvement in a predominantly macOS and ChromeOS environment.
You’ll have significant autonomy to identify operational friction, solve root causes, and make internal technology increasingly scalable and dependable.
It’s an ideal opportunity for someone who thinks like an engineer and wants to build systems rather than simply respond to tickets.

Accountabilities

• Own the lifecycle of corporate technology, including Google Workspace, identity providers, MDM, SaaS applications, endpoint standards, asset management, and joiner–mover–leaver processes.

• Administer and continuously improve identity and access environments, working with technologies such as Okta or equivalent IdPs, SSO, SAML, SCIM, DNS, and certificates.

• Operate and enhance Zero Trust capabilities, including ZTNA, Secure Web Gateway, DNS filtering, tunnels, and identity- and device-aware access policies.

• Maintain secure access to internal applications and services while troubleshooting connectivity and access issues and minimizing unnecessary employee friction.

• Build internal automation and tooling using Python, Apps Script, REST APIs, Terraform, n8n, and AI-assisted workflows to eliminate repetitive manual processes.

• Establish and improve service management practices covering incident, problem, and change management, service catalogs, knowledge bases, service metrics, capacity planning, and operational readiness.

• Drive endpoint reliability through zero-touch provisioning, compliance baselines, fleet health monitoring, reporting, SaaS governance, and self-service capabilities.

• Deploy and maintain operational security controls, harden endpoints, support security incidents, maintain current security baselines, and reduce operational risk.

• Identify recurring operational problems and improve the underlying systems and processes rather than simply resolving individual requests.

Requirements

• Demonstrated experience administering enterprise SaaS, identity, and endpoint-management environments at organizational scale.

• Hands‑on experience with Google Workspace or Microsoft 365, an identity provider such as Okta or Entra, and MDM platforms such as Kandji, Jamf, or similar.

• Practical understanding of SSO, SAML, SCIM, DNS, certificates, identity security, and secure access principles.

• Experience with Zero Trust technologies such as ZTNA, Secure Web Gateway, or modern network access controls; familiarity with Cloudflare Zero Trust, Zscaler, Netskope, Tailscale, or Entra Private Access is advantageous.

• Ability to troubleshoot and take ownership of an existing Zero Trust environment while continuously improving its reliability and usability.

• Strong automation mindset, with experience writing code in Python, Apps Script, or a similar language and working confidently with REST APIs.

• Proven ability to build internal tools or workflows that permanently reduce recurring manual work.

• Experience managing macOS fleets, zero‑touch provisioning, endpoint compliance, and device-security baselines.

• Experience with service operations, including incident and change management, operational metrics, documentation, and knowledge management.

• Solid security and infrastructure fundamentals, including endpoint hardening, identity security, DNS, certificates, and secure network access.

• Strong process‑improvement instincts, analytical thinking, and a willingness to challenge inefficient ways of working.

• Experience with Terraform or other Infrastructure as Code, Cloudflare, n8n, AI/LLM‑assisted workflows, Chrome Enterprise, or deep macOS administration is a plus.

• Exposure to security‑first or audited environments such as SOC 2 or ISO 27001 is advantageous.

• Strong communication, ownership, troubleshooting, and continuous‑learning skills are expected.

Benefits

• Fully remote working environment, with no mandatory office attendance.

• Monthly lifestyle subsidy supporting financial, physical, and mental well‑being.

• Work‑from‑home setup allowance available during the first three months.

• $1,500 USD annual Learning & Development allowance for professional development.

• Paid time off plus two additional company leave days.

• 18 weeks of paid parental leave, regardless of parenting role.

• Personal leave allowance covering sick and carer’s leave.

• Top‑spec laptop and hardware provided for your role.

• Generative AI subsidy providing access to paid AI tools and subscriptions.

• Access to comprehensive health insurance coverage.

• Opportunity to work in a global technology environment focused on engineering, automation, security, and continuous improvement.