Senior Identity Security Engineer – Remote, LATAM

• Design, secure, and optimize hybrid Active Directory and Microsoft Entra ID environments
• Assess and remediate identity security risks, privileged access issues, and authentication vulnerabilities
• Lead modernization initiatives involving NTLM, Kerberos, Conditional Access, SAML, OIDC, and SCIM
• Implement and support identity governance processes, including Joiner-Mover-Leaver (JML), entitlement management, and access reviews
• Configure and integrate Microsoft Defender for Identity, Sentinel, and Identity Protection
• Develop identity security standards, roadmaps, and technical recommendations
• Collaborate with infrastructure, security, and application teams to improve identity architecture and operational maturity
• Support audits, compliance initiatives, and security assessments
• Lead the design, security, and modernization of the organization's identity platform across Active Directory, Microsoft Entra ID, and cloud security services
• Strengthen identity security, reduce legacy authentication risk, improve governance, and support Zero Trust initiatives across hybrid environments
• Translate security requirements into scalable identity solutions

• 5+ years of Identity and Access Management (IAM) experience
• Strong experience with Active Directory
• Strong experience with Microsoft Entra ID (Azure AD)
• Strong experience with Hybrid Identity
• Strong experience with Conditional Access
• Strong experience with Privileged Identity Management (PIM)
• Strong experience with Microsoft Defender for Identity
• Strong experience with Microsoft Sentinel
• Experience with SAML, OAuth, OpenID Connect, and SCIM
• Strong PowerShell scripting and automation skills
• Experience implementing identity governance and privileged access controls
• Understanding of Zero Trust security principles and Microsoft security best practices
• Preferred: Microsoft Certifications (SC-300, SC-200, AZ-500, SC-100)
• Preferred: CISSP or equivalent security certification
• Preferred: Experience with Microsoft Purview, CyberArk, SailPoint, or Okta
• Preferred: Experience supporting enterprise security and compliance initiatives

• Ability to work from home
• Travel to a client site may be required
• Equal opportunity and inclusive work environment