Senior Identity Security Engineer (Remote - LATAM)

The Senior Identity Security Engineer will lead the design, security, and modernization of the organization's identity platform across Active Directory, Microsoft Entra ID, and cloud security services. This role is responsible for strengthening identity security, reducing legacy authentication risk, improving governance, and supporting Zero Trust initiatives across hybrid environments. The position requires deep technical expertise, strong problem-solving skills, and the ability to translate security requirements into scalable identity solutions.

Key Responsibilities

• Design, secure, and optimize hybrid Active Directory and Microsoft Entra ID environments.
• Assess and remediate identity security risks, privileged access issues, and authentication vulnerabilities.
• Lead modernization initiatives involving NTLM, Kerberos, Conditional Access, SAML, OIDC, and SCIM.
• Implement and support identity governance processes, including Joiner-Mover-Leaver (JML), entitlement management, and access reviews.
• Configure and integrate Microsoft security technologies including Defender for Identity, Sentinel, and Identity Protection.
• Develop identity security standards, roadmaps, and technical recommendations.
• Collaborate with infrastructure, security, and application teams to improve identity architecture and operational maturity.
• Support audits, compliance initiatives, and security assessments.

Required Qualifications

• 5+ years of Identity and Access Management (IAM) experience.
• Strong experience with:
• Active Directory
• Microsoft Entra ID (Azure AD)
• Hybrid Identity
• Conditional Access
• Privileged Identity Management (PIM)
• Microsoft Defender for Identity
• Microsoft Sentinel
• Experience with modern authentication protocols including SAML, OAuth, OpenID Connect, and SCIM.
• Strong PowerShell scripting and automation skills.
• Experience implementing identity governance and privileged access controls.
• Understanding of Zero Trust security principles and Microsoft security best practices.

Preferred Qualifications

• Microsoft Certifications (SC-300, SC-200, AZ-500, SC-100)
• CISSP or equivalent security certification
• Experience with Microsoft Purview, CyberArk, SailPoint, or Okta
• Experience supporting enterprise security and compliance initiatives