IT Operations & Identity Access Analyst

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for an IT Operations & Identity Access Analyst based in Brazil.

As an IT Operations & Identity Access Analyst, you will play a key role in strengthening cybersecurity and IT operations within a fast-growing fintech environment. You will be responsible for managing employee identities, access permissions, and corporate devices throughout the entire employee lifecycle, ensuring security without compromising user experience. Working closely with the CISO and teams across People, Engineering, Compliance, and Legal, you will help maintain a secure and efficient technology environment. You will manage identity platforms, single sign-on (SSO), multi-factor authentication (MFA), and endpoint security solutions. You will also contribute to access governance, audit readiness, and compliance initiatives, including ISO 27001 certification. This role offers hands-on exposure to modern cloud identity technologies, security automation, and IT support in a fully remote, international organization. You will have the opportunity to make a direct impact on the development and continuous improvement of the cybersecurity function.

Accountabilities:

• Manage the complete Joiner-Mover-Leaver (JML) lifecycle, including employee onboarding, role changes, and offboarding, in coordination with the People team, while continuously improving and automating related processes.
• Administer user accounts, groups, roles, and access policies through identity management platforms, applying the principles of least privilege and Role-Based Access Control (RBAC).
• Maintain and regularly update the organization's access and permissions matrix to ensure appropriate access governance.
• Manage privileged and temporary access requests, ensuring proper approvals, traceability, and automatic expiration of permissions.
• Administer cloud access, particularly through AWS IAM Identity Center, ensuring secure and controlled access to cloud resources.
• Integrate business applications with Single Sign-On (SSO) solutions using SAML 2.0 and OpenID Connect (OIDC), configure automated provisioning through SCIM, and implement MFA and conditional access policies.
• Conduct periodic access reviews and prepare technical documentation and evidence to support internal and external audits, including ISO 27001 certification requirements.
• Handle Level 1 and Level 2 IT support requests through Jira, ensuring tickets are resolved within established Service Level Agreements (SLAs).
• Coordinate technology onboarding and offboarding activities, including device configuration, account creation and revocation, and recovery of corporate assets.
• Manage macOS and Windows corporate devices through endpoint management platforms, implementing encryption, security patches, device locking, and remote wiping when required.
• Maintain an accurate inventory of IT assets and ensure corporate devices comply with internal security policies.
• Monitor identity and endpoint security alerts through Sophos Taegis and support incident response activities involving compromised accounts, phishing attempts, and other security threats.
• Automate repetitive IT and identity management tasks using scripts, JumpCloud APIs, and system integrations to improve operational efficiency and reduce manual errors.

Requirements:

• Bachelor's degree or equivalent academic background in Systems Engineering, Computer Science, Information Technology, or a related technical field.
• Between 2 and 4 years of professional experience in IT support, IT operations, identity management, or access administration.
• Hands-on experience administering Identity Providers (IdPs) such as JumpCloud, Okta, Microsoft Entra ID, or Google Workspace.
• Practical experience integrating applications through SSO protocols, particularly SAML and OIDC, and configuring multi-factor authentication (MFA).
• Basic to intermediate understanding of cloud Identity and Access Management (IAM), particularly AWS IAM Identity Center (formerly AWS SSO).
• Experience managing employee onboarding and offboarding processes, including account provisioning, permission management, and access revocation.
• Previous experience handling IT support tickets and working within defined SLAs.
• Familiarity with endpoint management and security tools for corporate device administration.
• Basic knowledge of databases and scripting languages such as Python, Bash, or PowerShell.
• Ability to read and understand technical documentation in English.
• Strong organizational skills, attention to detail, and a security-oriented mindset.
• Good communication and collaboration skills, with the ability to support employees across different teams and technical backgrounds.
• Proactive approach to problem-solving, with the ability to balance security requirements and a positive end-user experience.
• Experience with JumpCloud, Microsoft Entra ID, Active Directory, or Jira is considered an advantage.
• Relevant certifications such as JumpCloud Core, Okta Certified Administrator, Microsoft SC-300, or CompTIA Security+ are desirable.
• Previous experience in fintech or other regulated industries is a plus.
• Familiarity with ISO 27001 or SOC 2 audits and compliance processes is beneficial.
• Experience integrating internal systems with identity providers to automate employee provisioning and deprovisioning is an additional advantage.

Benefits:

• Unlimited paid time off.
• Fully remote working arrangement from anywhere in Latin America.
• 35 days of annual vacation.
• Full-time employment with a permanent contract.
• 40-hour working week.
• Opportunity to work in a fast-growing fintech operating across Latin America and Europe.
• Direct involvement in building and strengthening the organization's cybersecurity function.
• Exposure to modern identity management, cloud security, endpoint protection, and automation technologies.
• Opportunity to collaborate with international and multidisciplinary teams.
• Significant professional growth opportunities in IT operations, identity governance, and cybersecurity.
• Opportunity to make a meaningful impact by improving security processes while maintaining an excellent employee experience.

How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best! Why Apply Through Jobgether?

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1