IT Operations & Identity Access Analyst

Jobgether; Brasil; A distancia; BRL 120.000 - 180.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Unlimited PTO

Fully remote in Latin America

35 days annual vacation

Permanent contract

Descripción de la vacante

Jobgether, on behalf of a partner fintech, seeks an IT Operations & Identity Access Analyst based in Brazil to strengthen cybersecurity and IT operations. You will manage employee identities, access permissions, and corporate devices through the full lifecycle, collaborating with the CISO, People, Engineering, Compliance, and Legal teams.

Responsibilities include administering IdPs (JumpCloud, Okta, Entra ID), implementing SSO (SAML/OIDC), SCIM provisioning, MFA, and RBAC, and supporting ISO

Formación

• Bachelor's degree in a technical field.
• 2–4 years in IT support, IT operations, identity management, or access administration.
• Hands-on with IdPs (JumpCloud, Okta, Entra ID, Google Workspace).
• Experience with SSO protocols like SAML and OIDC and MFA configuration.
• Cloud IAM (AWS IAM Identity Center) knowledge.
• Onboarding/offboarding, provisioning, access revocation.
• Ticket handling in IT support with defined SLAs.
• Endpoint management and security tools familiarity.
• Basic scripting (Python, Bash, PowerShell).
• English technical reading ability.

Responsabilidades

• Manage the complete Joiner-Mover-Leaver lifecycle with People team.
• Administer user accounts, groups, roles, and access policies via identity platforms.
• Maintain and update access and permissions matrices for governance.
• Handle privileged and temporary access requests with approvals and traceability.
• Administer cloud access (AWS IAM Identity Center).
• Integrate apps with SSO using SAML/OIDC and SCIM provisioning.
• Conduct access reviews and prepare audit documentation (ISO 27001).
• Handle Level 1 and 2 IT support via Jira within SLAs.
• Coordinate onboarding/offboarding and device provisioning/revocation.
• Manage macOS/Windows devices via endpoint management; ensure encryption and patches.
• Maintain IT asset inventory and policy compliance.
• Monitor identity and endpoint security alerts (Sophos Taegis).
• Automate IAM tasks using scripts and API integrations.

Conocimientos

Identity management

SSO

RBAC

Cloud IAM

Python/Bash/PowerShell

Educación

Bachelor's degree in Systems Engineering / Computer Science / IT

Herramientas

JumpCloud

Okta

Microsoft Entra ID

AWS IAM Identity Center

Jira

Descripción del empleo

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for an IT Operations & Identity Access Analyst based in Brazil.

As an IT Operations & Identity Access Analyst, you will play a key role in strengthening cybersecurity and IT operations within a fast-growing fintech environment. You will be responsible for managing employee identities, access permissions, and corporate devices throughout the entire employee lifecycle, ensuring security without compromising user experience. Working closely with the CISO and teams across People, Engineering, Compliance, and Legal, you will help maintain a secure and efficient technology environment. You will manage identity platforms, single sign-on (SSO), multi-factor authentication (MFA), and endpoint security solutions. You will also contribute to access governance, audit readiness, and compliance initiatives, including ISO 27001 certification. This role offers hands-on exposure to modern cloud identity technologies, security automation, and IT support in a fully remote, international organization. You will have the opportunity to make a direct impact on the development and continuous improvement of the cybersecurity function.

Accountabilities:

• Manage the complete Joiner-Mover-Leaver (JML) lifecycle, including employee onboarding, role changes, and offboarding, in coordination with the People team, while continuously improving and automating related processes.
• Administer user accounts, groups, roles, and access policies through identity management platforms, applying the principles of least privilege and Role-Based Access Control (RBAC).
• Maintain and regularly update the organization's access and permissions matrix to ensure appropriate access governance.
• Manage privileged and temporary access requests, ensuring proper approvals, traceability, and automatic expiration of permissions.
• Administer cloud access, particularly through AWS IAM Identity Center, ensuring secure and controlled access to cloud resources.
• Integrate business applications with Single Sign-On (SSO) solutions using SAML 2.0 and OpenID Connect (OIDC), configure automated provisioning through SCIM, and implement MFA and conditional access policies.
• Conduct periodic access reviews and prepare technical documentation and evidence to support internal and external audits, including ISO 27001 certification requirements.
• Handle Level 1 and Level 2 IT support requests through Jira, ensuring tickets are resolved within established Service Level Agreements (SLAs).
• Coordinate technology onboarding and offboarding activities, including device configuration, account creation and revocation, and recovery of corporate assets.
• Manage macOS and Windows corporate devices through endpoint management platforms, implementing encryption, security patches, device locking, and remote wiping when required.
• Maintain an accurate inventory of IT assets and ensure corporate devices comply with internal security policies.
• Monitor identity and endpoint security alerts through Sophos Taegis and support incident response activities involving compromised accounts, phishing attempts, and other security threats.
• Automate repetitive IT and identity management tasks using scripts, JumpCloud APIs, and system integrations to improve operational efficiency and reduce manual errors.

Requirements:

• Bachelor's degree or equivalent academic background in Systems Engineering, Computer Science, Information Technology, or a related technical field.
• Between 2 and 4 years of professional experience in IT support, IT operations, identity management, or access administration.
• Hands-on experience administering Identity Providers (IdPs) such as JumpCloud, Okta, Microsoft Entra ID, or Google Workspace.
• Practical experience integrating applications through SSO protocols, particularly SAML and OIDC, and configuring multi-factor authentication (MFA).
• Basic to intermediate understanding of cloud Identity and Access Management (IAM), particularly AWS IAM Identity Center (formerly AWS SSO).
• Experience managing employee onboarding and offboarding processes, including account provisioning, permission management, and access revocation.
• Previous experience handling IT support tickets and working within defined SLAs.
• Familiarity with endpoint management and security tools for corporate device administration.
• Basic knowledge of databases and scripting languages such as Python, Bash, or PowerShell.
• Ability to read and understand technical documentation in English.
• Strong organizational skills, attention to detail, and a security-oriented mindset.
• Good communication and collaboration skills, with the ability to support employees across different teams and technical backgrounds.
• Proactive approach to problem-solving, with the ability to balance security requirements and a positive end-user experience.
Experience with JumpCloud, Microsoft Entra ID, Active Directory, or Jira is considered an advantage.
• Relevant certifications such as JumpCloud Core, Okta Certified Administrator, Microsoft SC-300, or CompTIA Security+ are desirable.
• Previous experience in fintech or other regulated industries is a plus.
• Familiarity with ISO 27001 or SOC 2 audits and compliance processes is beneficial.
• Experience integrating internal systems with identity providers to automate employee provisioning and deprovisioning is an additional advantage.

Benefits:

• Unlimited paid time off.
• Fully remote working arrangement from anywhere in Latin America.
• 35 days of annual vacation.
• Full-time employment with a permanent contract.
• 40-hour working week.
• Opportunity to work in a fast-growing fintech operating across Latin America and Europe.
• Direct involvement in building and strengthening the organization's cybersecurity function.
• Exposure to modern identity management, cloud security, endpoint protection, and automation technologies.
• Opportunity to collaborate with international and multidisciplinary teams.
• Significant professional growth opportunities in IT operations, identity governance, and cybersecurity.
• Opportunity to make a meaningful impact by improving security processes while maintaining an excellent employee experience.