Systems Administrator, IAM (Fintech)

TL;DR

Systems Administrator, IAM (Fintech): Designing, implementing, and maintaining robust IAM solutions across hybrid and multi-cloud environments with an accent on secure authentication, authorization, and compliance processes. Focus on evolving IAM architecture, implementing RBAC models, and developing automation for provisioning, deprovisioning, and access reviews.

Location: Remote, must be based in Brazil. Remote positions may require presence at a Visa office with scheduled notice.

Company

Technology company founded in 2016 providing a cloud-based processing platform for banking, card issuing, and financial market infrastructure; joined Visa in 2024 with 500+ employees across 10+ countries.

What you will do

• Design, evolve, and maintain IAM architecture aligned with security best practices.
• Implement and manage RBAC models and IAM tools like Okta and Ping Identity.
• Integrate internal/external applications with IAM solutions securely.
• Develop automation scripts for provisioning, deprovisioning, and access reviews using Python, PowerShell, or similar.
• Operate IAM services in AWS and support expansion to Azure across multi-cloud environments.
• Implement IAM governance, policies, compliance, and support audits and access reviews.
• Collaborate with engineering, security, and business teams on identity workflows.

Requirements

• Be based in Brazil.
• English (B2).
• Bachelor's degree in computer science, engineering, information systems, or related field.
• Hands-on experience with IAM platforms like Okta, Ping Identity, or Microsoft Entra ID.
• Strong knowledge of RBAC, access management, and protocols (SAML, OAuth 2.0, OpenID Connect).
• Experience with cloud environments (Azure preferred) and integrating IAM into DevSecOps/CI/CD pipelines.
• Ability to work independently in distributed, multicultural teams with strong analytical and communication skills.

Nice to have

• Knowledge of Zero Trust Architecture.
• Certifications: Okta Certified Professional, Ping Identity, AWS Security Specialty, Microsoft Identity and Access Administrator.
• Proficiency in automation/scripting (Python, PowerShell, Bash).