Mid-Level Security Engineer (IAM)

Location: Curitiba, Brazil — on-site

Company

hirify.global is a Latin American fintech building a global payments platform that connects digital businesses with consumers across more than 23 markets.

What you will do

• Design and build automations for identity lifecycle processes, including joiner, mover, leaver, access reviews, and segregation-of-duties remediation.
• Integrate target systems with the SailPoint identity governance platform through APIs and custom connectors.
• Evolve access controls in Microsoft Entra ID, AWS, and GCP, preferably using infrastructure as code.
• Investigate and resolve access problems end to end across cloud, SaaS, and internal systems.
• Build internal tools, scripts, and AI agents to reduce operational workload.
• Automate data extraction to support audit evidence and remediation for PCI-DSS, ISO 27001, and external audits.

Requirements

• Hands-on experience with an identity governance platform such as SailPoint, Saviynt, Okta, One Identity, or a similar platform, including provisioning, access certification, and target-system integration.
• Proficiency in Python for automation, API consumption, and identity data processing, plus experience with Git and infrastructure-as-code practices.
• Experience with Microsoft Entra ID and IAM in at least one cloud provider: AWS or GCP.
• Practical use of generative AI and agents in engineering work.
• Understanding of segregation of duties and access controls in business processes.
• Intermediate to Advanced English for technical reading and vendor communication.

Nice to have

• Experience building AI agents or integrations with LLM APIs and MCP.
• Certifications such as Microsoft SC-300, SailPoint Identity Security Cloud, AWS Security, or GCP Security.

Culture & Benefits

• Annual performance bonus based on company results.
• Monthly meal allowance.
• Financial assistance for undergraduate, graduate, and MBA programs.
• Budget for courses, certifications, and workshops, plus language classes.
• Medical and dental plans with dependent coverage and wellness programs.
• Semi-flexible hours, an additional birthday day off, a year-end break, and access to physical and mental well-being activities.