IAM Information Systems Engineer 3 (SailPoint)

Location: Remote from Brazil; Brazil, São Paulo

Company

Enterprise identity and access management programs focused on cloud-native SailPoint migration, access governance, and automation.

What you will do

• Architect the migration of business applications from manual flat files and legacy SailPoint IIQ to SailPoint Identity Security Cloud.
• Define application onboarding playbooks, payload schemas, connector factory standards, and pre-production exit gates.
• Design enterprise RBAC and ABAC models with Workday-driven birthright provisioning.
• Develop Agentic AI workflows for smart approvals, account correlation, orphan account detection, and enterprise RPA standards.
• Govern integrations between ITSM platforms and SailPoint to support Access Request Centralization.
• Partner with directors, application owners, and executive stakeholders to prioritize backlogs and deliver multi-year IGA programs.

Requirements

• Advanced experience in IAM architecture, payload pipeline engineering, and enterprise directory leadership.
• Master-level expertise with SailPoint Identity Security Cloud and IdentityIQ.
• Experience with SCIM, REST, OAuth 2.0 API gateways, Workday HR integration, and Active Directory architecture.
• Programming or automation experience with PowerShell, Python, or Java.
• Ability to manage complex, concurrent strategic programs and operational compliance demands under tight deadlines.
• Strong stakeholder management, consensus-building, backlog prioritization, and organizational change leadership skills.

Culture & Benefits

• Remote work from Brazil.
• Work across decentralized business units and enterprise security stakeholders.
• Focus on compliance-by-design, strategic initiative, and self-sufficient execution.