IAM Engineer - LATAM (Azure/Entra ID)

Location: Escazu, Costa Rica

Company

Custom application development provider delivering enterprise software across the full lifecycle, from architecture and design through development, QA, and application maintenance and support.

What you will do

• Manage identity governance across an environment with approximately 50,000 Azure/Entra ID users and more than 75,000 SailPoint-managed identities.
• Administer enterprise-scale Active Directory and Azure AD/Entra ID environments.
• Implement and operate CyberArk privileged access management.
• Manage Ping Federation and federation protocols including SAML and OAuth/OIDC.
• Design and maintain user provisioning and deprovisioning workflows.
• Support identity governance compliance, audits, and access-governance improvements.

Requirements

• Hands-on enterprise-scale experience with Active Directory and Azure AD/Entra ID.
• Experience with SailPoint Identity Governance, identity lifecycle management, and access certification processes.
• CyberArk PAM implementation and administration experience.
• Expertise in Ping Federation, SAML, and OAuth/OIDC.
• Experience administering Exchange and Microsoft 365.
• Strong communication, collaboration, and Agile teamwork skills.

Nice to have

• PowerShell or Python scripting for identity lifecycle and reporting automation.
• Experience with SSO/MFA rollout and adoption programs.
• Exposure to zero-trust architecture principles.
• Experience integrating IAM platforms with ServiceNow access-request workflows.

Culture & Benefits

• Consultative teamwork focused on solving client business problems.
• Culture built around client service, trust-based relationships, innovation, and one-team collaboration.
• Proactive support for Agile methodology and collaborative delivery.