Senior Cybersecurity Analyst

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Design, implement, and optimize access controls for both human and non-human identities across corporate applications and cloud environments.

• Oversee the identity and access lifecycle — including onboarding, transfers, and offboarding — along with access governance in SailPoint.

• Model roles and policies, establish segregation of duties, and manage access certification initiatives.

• Lead privileged access management efforts, which encompass inventory management, just-in-time access provisioning, approvals, rotation, monitoring, and reviews.

• Handle service accounts, bots, integrations, API keys, tokens, and application credentials.

• Integrate applications with IDM solutions utilizing SAML, OIDC, SCIM, and connectors; manage applications that employ local authentication.

• Administer identities, groups, organizational units, SSO, and MFA within Google Workspace.

• Evaluate and minimize privileges in AWS IAM, addressing issues related to excessive access, long-lived credentials, and orphaned accounts.

• Develop and maintain N8N automations for integrations, requests, approvals, provisioning, and deprovisioning tasks.

• Contribute to the Zero Trust architecture through explicit verification, conditional access, MFA, and context- and risk-based evaluations.

• Conduct access reviews, assist with audits, provide necessary evidence, and remediate discrepancies in collaboration with the relevant teams.

• Establish access metrics and propose enhancements driven by data analysis.

• Offer technical support to analysts and partner teams while documenting standards and best practices.

⛳️ Requirements

• Solid, demonstrated experience in identity and access management (IAM/IGA) within a corporate setting, ideally at a technology or financial services firm.

• Practical experience with SailPoint (IdentityIQ or Identity Security Cloud), including connectors, rules, workflows, and access certifications.

• Strong expertise in Google Workspace administration, encompassing directory management, groups, SSO, MFA, and security policies.

• Experience in managing privileged access (PAM), including administrative accounts, credential vaults, just-in-time access, and password and key rotation.

• Background in managing service accounts and non-human identities across cloud and on-premises environments.

• Working knowledge of integrating applications with IDM solutions using SAML, OIDC, SCIM, and connectors.

• Familiarity with AWS IAM, including policies, roles, federation, permissions boundaries, and permission analysis.

• Experience in building automations and integrations with N8N or a similar low-code orchestration tool, including API and webhook utilization.

• Understanding of RBAC, ABAC, segregation of duties, and compliance and audit requirements.

• Strong knowledge and practical application of need-to-know, least privilege, and Zero Trust principles.

• Nice to have: Experience with CyberArk, HashiCorp Vault, AWS Secrets Manager; proficiency in Python or JavaScript; familiarity with Okta or Entra ID; SailPoint or AWS Security certifications; experience with the Central Bank of Brazil, PCI DSS, or ISO 27001; knowledge in automation and AI for access management.

🏝️ Benefits

• Competitive, market-aligned salary.

• Remote work — no matter your location, you are part of the team!

• Monthly home office allowance provided through the RecargaPay app.

• Health and dental insurance with no co-pay required.

• Life insurance coverage.

• Flexible meal allowance through Flash.

• TotalPass to support your well-being.

• Commitment to Diversity & Inclusion at RecargaPay: the freedom to be yourself, with diverse perspectives and experiences valued.

• Opportunity to be considered for additional roles within the RecargaPay group by submitting your résumé.