Senior IAM Engineer

Senior IAM Engineer Department: Engineering Team: Security Engineer Location: Sao Paulo, Brazil Type: Full-Time **About the role and team** As an IAM Operations Engineer, you’ll support the day-to-day identity and access management ecosystem, ensuring secure, compliant, and efficient access across enterprise platforms. You’ll focus on operational excellence through automation, AI-driven workflows, and bot-based process improvements, partnering closely with Security, IT, and Compliance teams to deliver scalable identity services. **What you’ll do** - Administer and maintain enterprise IAM platforms including Okta, Active Directory, Azure AD, and SailPoint IIQ to ensure global availability and security. - Build and maintain automation scripts and bot flows using Python or PowerShell to streamline the user lifecycle, from seamless onboarding to secure de-provisioning. - Integrate IAM workflows with AI-powered chatbots and RPA frameworks to enable self-service access, reducing manual intervention and improving response times. - Leverage AI/ML-based insights to detect identity anomalies, enforce the principle of least privilege, and strengthen our Zero Trust architecture. - Monitor system health and operational metrics using dashboards in Tableau or Jira to proactively identify and resolve bottlenecks before they impact the business. - Collaborate cross-functionally with Security, IT, and Compliance teams to implement automated incident response playbooks that remediate IAM issues at scale. **Basic Qualifications** - Bachelor’s degree in Computer Science, Information Security, or a related field; - 6+ years of experience in Identity and Access Management (IAM) operations or IT security administration. - Hands-on experience with Okta, Active Directory, and Azure AD administration. - Proficiency in Python, PowerShell, or Java scripting for process automation. - Experience with Terraform or similar Infrastructure-as-Code (IaC) principles for IAM deployment. - Working knowledge of authentication and authorization protocols including SAML, OAuth, OIDC, and LDAP. **Pre