Senior Identity and Security Operations Engineer

Senior Identity and Security Operations Engineer

We are seeking a Senior Identity and Security Operations Engineer to join our team. In this role, you will collaborate with diverse teams to design, implement, and manage our security and identity platforms. You will build, integrate, and manage account- and system-provisioning solutions as we continue our journey towards ‘Zero Trust’. Additionally, you will work directly with application owners and business users to provide security subject matter expertise and guidance for our security standards and policies, helping to protect customers and ensure a secure environment.

Responsabilities

• Administer Identity and Security operations platforms (e.g., Okta, Active Directory, Active Directory Certificate Services (ADCS), ADFS, Azure, Intune, AWS/IAM, certificate and secrets management).
• Manage Active Directory implementations and rebuild the ADCS environment.
• Work on various Okta projects and manage permissions effectively.
• Provide Tier 3 support for all Identity/Security Operations related issues.
• Develop policies and procedures for Identity and Security systems.
• Be a subject matter expert (SME) for SSO, SAML, and SCIM for application and business owners.
• Work closely with other security and infrastructure teams to proactively identify, protect, and defend the enterprise from cybersecurity threats and resolve complex issues.
• Mentor and educate other team members.
• Be available for on-call duties as required.

Basic Qualifications

• 4+ years of experience in at least 3 of the following:
• Automating cross-domain identity management (SCIM).
• Operating multi-factor authentication solutions.
• Managing integration APIs and web services (e.g., REST, SOAP, OAuth, OIDC).
• Role-based access control methods and systems, and privileged account management.
• Risk-based authentication and conditional access.
• Experience with enterprise access reviews and recertification.
• Advanced understanding of security principles (e.g., separation of duties, least privilege principle).
• Expert knowledge in core IAM Domains: Identity Governance and Administration, Privileged Access Management, Authentication, Authorization, Identity Lifecycle Management.
• Understanding of Change Management and Service Desk principles.
• Understanding of Agile frameworks like Kanban or Scrum.

Preferred Qualifications

• Expert in Okta Lifecycle Management and Active Directory Certificate Services (ADCS).
• Technical knowledge of PKI & API Security.
• Strong experience with Zero Trust Implementations.
• Demonstrated knowledge in three or more information technology related fields that include cloud services, authentication, PKI, system administration, software development, networking, or security architecture.
• Advanced knowledge of a range of security-related subjects such as threat hunting, threat modeling, digital forensics, reverse engineering, phishing, and penetration testing.
• Strong communication skills to interact with audiences that include customers, peers, and executive leadership.
• willingness to work on-call shifts 

Our benefits:   -Health and dental insurance -Meal and food allowance -Childcare assistance -Extended paternity leave -Partnership with gyms and health and wellness professionals via Wellhub (Gympass) TotalPass; -Profit Sharing and Results Participation (PLR); -Life insurance -Continuous learning platform (CI&T University); -Discount club -Free online platform dedicated to physical, mental, and overall well-being -Pregnancy and responsible parenting course -Partnerships with online learning platforms -Language learning platform And many more!   More details about our benefits here: https://ciandt.com/br/pt-br/carreiras   At CI&T, inclusion starts at the first contact. If you are a person with a disability, it is important to present your assessment during the selection process. See which data needs to be included in the report by clicking here.This way, we can ensure the support and accommodations that you deserve. If you do not yet have the assessment, don't worry: we can support you in obtaining it.   We have a dedicated Health and Well-being team, inclusion specialists, and affinity groups who will be with you at every stage. Count on us to make this journey side by side.