Senior Identity and Security Operations Engineer

Ciandt; Brasil; Presencial; BRL 120 000 - 160 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Health and dental insurance

Meal and food allowance

Childcare assistance

Extended paternity leave

Partnership with gyms

Profit Sharing

Life insurance

Continuous learning platform

Language learning platform

Resumo da oferta

Ciandt is looking for a Senior Identity and Security Operations Engineer to design and manage their security identity platforms. This role will involve administering systems like Okta and Active Directory, while providing subject-matter expertise to enhance security standards.

You will work with diverse teams, support identity operations, and mentor team members. 4+ years of experience in identity management is required, along with strong communication skills. The company offers various benefits, including health insurance and continuous learning opportunities.

Qualificações

• 4+ years of experience in identity management.
• Expert knowledge in identity and access management domains.
• Strong communication skills.

Responsabilidades

• Administer diverse identity and security platforms.
• Manage Active Directory implementations.
• Provide Tier 3 support for identity and security operations.
• Mentor and educate team members.

Conhecimentos

Cross-domain identity management (SCIM)

Multi-factor authentication solutions

Role-based access control

Privileged account management

Risk-based authentication

Identity Governance and Administration

Agile frameworks

Ferramentas

Okta

Active Directory

AWS/IAM

Descrição da oferta de emprego

Senior Identity and Security Operations Engineer

We are seeking a Senior Identity and Security Operations Engineer to join our team. In this role, you will collaborate with diverse teams to design, implement, and manage our security and identity platforms. You will build, integrate, and manage account‑and system‑provisioning solutions as we continue our journey towards Zero Trust. Additionally, you will work directly with application owners and business users to provide security subject‑matter expertise and guidance for our security standards and policies, helping to protect customers and ensure a secure environment.

Responsibilities

• Administer Identity and Security operations platforms (e.g., Okta, Active Directory, Active Directory Certificate Services (ADCS), ADFS, Azure, Intune, AWS/IAM, certificate and secrets management).
• Manage Active Directory implementations and rebuild the ADCS environment.
• Work on various Okta projects and manage permissions effectively.
• Provide Tier 3 support for all Identity/Security Operations related issues.
• Develop policies and procedures for Identity and Security systems.
• Be a subject matter expert (SME) for SSO, SAML, and SCIM for application and business owners.
• Work closely with other security and infrastructure teams to proactively identify, protect, and defend the enterprise from cybersecurity threats and resolve complex issues.
• Mentor and educate other team members.
• Be available for on‑call duties as required.

Basic Qualifications

• 4+ years of experience in at least 3 of the following:
• Automating cross‑domain identity management (SCIM).
• Operating multi‑factor authentication solutions.
• Managing integration APIs and web services (e.g., REST, SOAP, OAuth, OIDC).
• Role‑based access control methods and systems, and privileged account management.
• Risk‑based authentication and conditional access.Experience with enterprise access reviews and recertification.
• Advanced understanding of security principles (e.g., separation of duties, least privilege principle).
• Expert knowledge in core IAM Domains: Identity Governance and Administration, Privileged Access Management, Authentication, Authorization, Identity Lifecycle Management.
• Understanding of Change Management and Service Desk principles.
• Understanding of Agile frameworks like Kanban or Scrum.

Preferred Qualifications

• Expert in Okta Lifecycle Management and Active Directory Certificate Services (ADCS).
• Technical knowledge of PKI & API Security.
• Strong experience with Zero Trust Implementations.
• Demonstrated knowledge in three or more information technology related fields that include cloud services, authentication, PKI, system administration, software development, networking, or security architecture.
• Advanced knowledge of a range of security‑related subjects such as threat hunting, threat modeling, digital forensics, reverse engineering, phishing, and penetration testing.
• Strong communication skills to interact with audiences that include customers, peers, and executive leadership.
• Willingness to work on‑call shifts.

Benefits

• Health and dental insurance
• Meal and food allowance
• Childcare assistance
• Extended paternity leave
• Partnership with gyms and health and wellness professionals via Wellhub (Gympass) TotalPass
• Profit Sharing and Results Participation (PLR)
• Life insurance
• Continuous learning platform (CI&T University)
• Discount club
• Free online platform dedicated to physical, mental, and overall well‑being
• Pregnancy and responsible parenting course
• Partnerships with online learning platforms
• Language learning platform