Senior Identity and Access Engineer

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Manage, maintain, and enhance Active Directory and Microsoft Entra ID environments, ensuring the security, stability, and efficiency of identity services.

• Implement and refine identity and access management policies, including Conditional Access, MFA, and Privileged Identity Management (PIM).

• Create scripts and automations utilizing PowerShell and Microsoft Graph to optimize processes and minimize manual tasks.

• Investigate and resolve intricate incidents related to authentication, directories, and identity management.

• Oversee and enhance the Microsoft PKI infrastructure, including Active Directory Certificate Services (AD CS), certificate authorities, and certificate lifecycle management.

• Support security initiatives involving Microsoft Defender, Microsoft Purview, and identity protection.

• Identify vulnerabilities, excessive permissions, and opportunities for improving environment configurations.

• Engage in projects focused on the integration, migration, and advancement of identity and access services.

• Document solutions, technical procedures, and automations developed.

• Collaborate with global Security, Architecture, and Microsoft 365 teams, sharing knowledge and best practices.

⛳️ Requirements

• Extensive experience in advanced Active Directory administration, including multidomain environments, Group Policy, DNS, trusts, and authentication.

• Practical experience with Microsoft Entra ID, hybrid environments, Entra Connect, Identity Protection, and PIM.

• Advanced proficiency in PowerShell and Microsoft Graph, including automation development and API-based integrations.

• Experience implementing and managing Conditional Access and MFA policies, along with risk-based access controls.

• Understanding of identity security, including privileged accounts, external users, service principals, and application identities.

• Familiarity with Microsoft Defender for Identity and Defender for Cloud Apps.

• Specialized knowledge of Microsoft PKI and AD CS, including certificate management and certificate authority infrastructure.

• Experience in large-scale, highly complex enterprise environments.

• Knowledge of ITIL-based service management processes and security best practices such as Zero Trust and the principle of least privilege.

• Proficient in English for both verbal and written communication.

• Preferred: Experience with Okta, Single Sign-On (SSO), and identity provisioning.

• Preferred: Knowledge of Joiner, Mover, and Leaver (JML) processes and user lifecycle automation.

• Preferred: Experience with Azure Automation, runbooks, and version control tools such as Git.

• Preferred: Participation in identity integration or migration projects related to mergers and acquisitions.

• Preferred: Microsoft SC-300 certification or other certifications related to Microsoft security and identity.

🏝️ Benefits

• Collaborative environment built on respect and trust.

• Global projects and multicultural teams.

• All necessary equipment to perform your job, including a laptop and peripherals.

• Medical and dental insurance.

• Life insurance.

• Mental health program.

• Anywhere Office — flexibility to work wherever you need.

• Meal and food allowance (Flash benefits card).

• Home office allowance (Flash benefits card).

• Mobility allowance (Flash benefits card).

• Mentorship program for career development and guidance.

• Participation in development tracks, including an allowance for courses and other learning activities, plus access to our free platform with a wide range of self-learning courses.

• English lessons with a private teacher.

• Awesomeness Committee — themed and exclusive gifts delivered to employees.

• Gympass.

• Flexible working hours (40 hours per week).

• Day off on your birthday.

• Appreciation — recognition program with the opportunity to give and receive “dentsu dollars” each month.

• 100% remote or hybrid work — your choice!