Senior Identity Security Engineer (Remote - LATAM)

The company empowers businesses to redefine what's possible with modern technology and human expertise. Our exceptional experience across Applications, Data & AI, DevOps, Security, and the Microsoft Azure platform enables organizations to accelerate innovation, enhance security, and optimize operational agility. As a Microsoft Partner with seven specializations, GitHub AI Partner of the Year, a member of the GitHub Advisory Board, and a member of the prestigious Microsoft Intelligent Security Association (MISA), the company expertly delivers cutting-edge, integrated solutions that deliver business value.

The Senior Identity Security Engineer will lead the design, security, and modernization of the organization's identity platform across Active Directory, Microsoft Entra ID, and cloud security services. This role is responsible for strengthening identity security, reducing legacy authentication risk, improving governance, and supporting Zero Trust initiatives across hybrid environments. The position requires deep technical expertise, strong problem-solving skills, and the ability to translate security requirements into scalable identity solutions.

Key Responsibilities

• Design, secure, and optimize hybrid Active Directory and Microsoft Entra ID environments.

• Assess and remediate identity security risks, privileged access issues, and authentication vulnerabilities.

• Lead modernization initiatives involving NTLM, Kerberos, Conditional Access, SAML, OIDC, and SCIM.

• Implement and support identity governance processes, including Joiner-Mover-Leaver (JML), entitlement management, and access reviews.

• Configure and integrate Microsoft security technologies including Defender for Identity, Sentinel, and Identity Protection.

• Develop identity security standards, roadmaps, and technical recommendations.

• Collaborate with infrastructure, security, and application teams to improve identity architecture and operational maturity.

• Support audits, compliance initiatives, and security assessments.

Required Qualifications

• 5+ years of Identity and Access Management (IAM) experience.

• Strong experience with:

• Active Directory

• Microsoft Entra ID (Azure AD)

• Hybrid Identity

• Conditional Access

• Privileged Identity Management (PIM)

• Microsoft Defender for Identity

• Microsoft Sentinel

• Experience with modern authentication protocols including SAML, OAuth, OpenID Connect, and SCIM.

• Strong PowerShell scripting and automation skills.

• Experience implementing identity governance and privileged access controls.

• Understanding of Zero Trust security principles and Microsoft security best practices.

Preferred Qualifications

• Microsoft Certifications (SC-300, SC-200, AZ-500, SC-100)

• CISSP or equivalent security certification

• Experience with Microsoft Purview, CyberArk, SailPoint, or Okta

• Experience supporting enterprise security and compliance initiatives

This is a contractor position with the ability to work from home but may require travel to a client site.

The company is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. We do not discriminate based upon race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics. All employment is decided on the basis of qualifications, merit, and business need.