IT Operations & Identity Access Analyst

Accountabilities:

Manage the complete Joiner-Mover-Leaver (JML) lifecycle, including employee onboarding, role changes, and offboarding, in coordination with the People team, while continuously improving and automating related processes.
Administer user accounts, groups, roles, and access policies through identity management platforms, applying the principles of least privilege and Role-Based Access Control (RBAC).
Maintain and regularly update the organization's access and permissions matrix to ensure appropriate access governance.
Manage privileged and temporary access requests, ensuring proper approvals, traceability, and automatic expiration of permissions.
Administer cloud access, particularly through AWS IAM Identity Center, ensuring secure and controlled access to cloud resources.
Integrate business applications with Single Sign-On (SSO) solutions using SAML 2.0 and OpenID Connect (OIDC), configure automated provisioning through SCIM, and implement MFA and conditional access policies.
Conduct periodic access reviews and prepare technical documentation and evidence to support internal and external audits, including ISO 27001 certification requirements.
Handle Level 1 and Level 2 IT support requests through Jira, ensuring tickets are resolved within established Service Level Agreements (SLAs).
Coordinate technology onboarding and offboarding activities, including device configuration, account creation and revocation, and recovery of corporate assets.
Manage macOS and Windows corporate devices through endpoint management platforms, implementing encryption, security patches, device locking, and remote wiping when required.
Maintain an accurate inventory of IT assets and ensure corporate devices comply with internal security policies.
Monitor identity and endpoint security alerts through Sophos Taegis and support incident response activities involving compromised accounts, phishing attempts, and other security threats.
Automate repetitive IT and identity management tasks using scripts, JumpCloud APIs, and system integrations to improve operational efficiency and reduce manual errors.
Requirements:
Bachelor's degree or equivalent academic background in Systems Engineering, Computer Science, Information Technology, or a related technical field.
Between 2 and 4 years of professional experience in IT support, IT operations, identity management, or access administration.
Hands-on experience administering Identity Providers (IdPs) such as JumpCloud, Okta, Microsoft Entra ID, or Google Workspace.
Practical experience integrating applications through SSO protocols, particularly SAML and OIDC, and configuring multi-factor authentication (MFA).
Basic to intermediate understanding of cloud Identity and Access Management (IAM), particularly AWS IAM Identity Center (formerly AWS SSO).
Experience managing employee onboarding and offboarding processes, including account provisioning, permission management, and access revocation.
Previous experience handling IT support tickets and working within defined SLAs.
Familiarity with endpoint management and security tools for corporate device administration.
Basic knowledge of databases and scripting languages such as Python, Bash, or PowerShell.
Ability to read and understand technical documentation in English.
Strong organizational skills, attention to detail, and a security-oriented mindset.
Good communication and collaboration skills, with the ability to support employees across different teams and technical backgrounds.
Proactive approach to problem-solving, with the ability to balance security requirements and a positive end-user experience.
Experience with JumpCloud, Microsoft Entra ID, Active Directory, or Jira is considered an advantage.
Relevant certifications such as JumpCloud Core, Okta Certified Administrator, Microsoft SC-300, or CompTIA Security+ are desirable.
Previous experience in fintech or other regulated industries is a plus.
Familiarity with ISO 27001 or SOC 2 audits and compliance processes is beneficial.
Experience integrating internal systems with identity providers to automate employee provisioning and deprovisioning is an additional advantage.
Benefits:
Unlimited paid time off.
Fully remote working arrangement from anywhere in Latin America.
35 days of annual vacation.
Full-time employment with a permanent contract.
40-hour working week.
Opportunity to work in a fast-growing fintech operating across Latin America and Europe.
Direct involvement in building and strengthening the organization's cybersecurity function.
Exposure to modern identity management, cloud security, endpoint protection, and automation technologies.
Opportunity to collaborate with international and multidisciplinary teams.
Significant professional growth opportunities in IT operations, identity governance, and cybersecurity.
Opportunity to make a meaningful impact by improving security processes while maintaining an excellent employee experience.