{"id":120220,"url":"https://alion.io/job/dlocal-principal-security-engineer-identity-access","title":"Principal Security Engineer – Identity & Access","company":{"id":6586,"name":"dLocal","domain":"dlocal.com","url":"https://alion.io/company/dlocal","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Lever","truth_index":{"grade":"A","score":88,"open_postings":28,"ghost_share":0,"stale_share":0.286,"repost_share":0,"time_to_fill_p50_days":136,"computed_at":"2026-10-17T05:46:00Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Madrid, Spain","Buenos Aires, Argentina","Barcelona, Spain","Bucharest, Romania","Montevideo, Uruguay","Brazil"],"countries":["ES","AR","RO","UY","BR"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":51000,"max_usd":132000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":623},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"IAM","optional":false},{"name":"Least Privilege","optional":false},{"name":"Okta","optional":false},{"name":"Shift-Left","optional":false},{"name":"Shift-Left Security","optional":false},{"name":"Zero Trust","optional":false},{"name":"PCI DSS","optional":true},{"name":"Service Desk","optional":true},{"name":"SOC 2","optional":true}],"status":"live","first_seen_at":"2026-07-22T12:09:02Z","employer_posted_date":"2026-07-22","last_verified_at":"2026-10-17T13:48:45Z","board_verified":true,"closed_at":null,"days_open":87,"trust":{"level":"ok","repost_count":0,"flags":[],"days_open":86},"description":"About Us & The Role\nWe are not building a traditional, bureaucratic identity and access management function. We are building a modern, highly automated identity security program-and we need a sharp, relentless operator to build it.\nIdentity is the new perimeter, and managing how our global workforce accesses enterprise systems is one of our highest priorities. We are looking for a Principal Security Engineer - Identity & Access to help drive our identity evolution alongside our existing senior engineering team. You will be walking into a rapidly evolving ecosystem that has outgrown its early identity frameworks. Your mandate is to take that complex web of legacy entitlements and build a highly scalable, automated identity governance machine.\nThis is not an \"ivory tower\" strategy role. We do not need someone to draw Visio diagrams and hand them off to junior admins. We need a pragmatic, high-agency builder who helps design the strategy but has the zero-ego grit to execute it with their own hands.\nWhat You'll Do\nEngineer the Identity Lifecycle (JML & SoD): Take on our workforce identity and access ecosystem. You will engineer a highly automated Joiner-Mover-Leaver (JML) machine, implementing robust access certifications, Separation of Duties (SoD), and unified IGA frameworks that scale with our hyper-growth.\n\nFederation, Zero Trust & Integration: Design and scale our authentication and authorization foundations across cloud, SaaS, and on-premise environments. You will lead identity federation leveraging SAML, OAuth2, OpenID Connect, and SCIM, while driving the adoption of Zero Trust architecture and Adaptive MFA across the enterprise.\n\nM&A & Enterprise Transformation: As a rapidly expanding global fintech, we acquire and scale. You will lead the identity integration strategy for mergers, acquisitions, and massive enterprise transformation initiatives, securely and seamlessly folding new organizations into our identity ecosystem.\n\nZero-Ego Execution: As a senior technical anchor on the team, you lead by example. You will get your hands dirty. You will configure the integrations, write the RBAC policies, engineer the IGA platforms, and untangle access flows yourself.\n\nCodify Governance & Shift Left: You will design self-service identity workflows, automated controls, and identity KPIs that force business leaders (the first line of defense) to explicitly own and accept their access risks. You translate written compliance policies into code.\n\nBe the IAM Diplomat: When you change how developers and commercial teams authenticate, there is always friction. You will be a key face of our identity transformation. You must have the extreme patience, persistence, and EQ to negotiate with engineering directors, bringing them along and enforcing security without alienating them.\n\nWhat You Bring\nResilient Problem Solver: You don't get stuck. Where others see a messy legacy setup, you see an exciting puzzle. You don't get paralyzed or frustrated by organizational friction; you thrive on using the latest technologies and original thinking to solve long-standing identity problems.\n\nTrack Record Over Tenure: We do not care about arbitrary \"years of experience.\" We care about outcomes. You must have a proven track record of designing, building, or scaling Identity and Access programs in fast-paced, complex environments.\n\nDeep IGA & Protocol Expertise: You possess solid, hands-on experience with modern workforce identity systems, lifecycle processes (JML, SoD, Certifications), protocols (SAML, OIDC, OAuth2, SCIM), RBAC/ABAC models, and enterprise identity platforms (e.g., SailPoint, Saviynt, Okta).\n\nPragmatic Operator Mindset: You understand that security cannot kill velocity. You know how to find the critical balance between enforcing strict, least-privilege security and maintaining high usability for the business.\n\nDisciplined Multi-Threading: You are ruthlessly organized, capable of driving an enterprise identity strategy while simultaneously troubleshooting an immediate, ground-level access escalation.\n\nForce Multiplier: You elevate the engineers around you. You bring strong mentoring, leadership, and documentation capabilities, ensuring that the systems you design are highly scalable, well-understood, and easily maintained by the wider organization.\n\nNice to Have\nExperience navigating the identity and access requirements of highly regulated environments (PCI-DSS, SOX, SOC 2).\n\nFamiliarity with machine identity governance, secrets management, and API access.\n\nRelevant industry certifications demonstrating your dedication to the identity domain.\n\nYour Cross-Functional Surface Area\nYou will not work in a silo. You will partner deeply with Enterprise IT Service Desk, Application owners, Cloud Platform, and Infrastructure teams to govern access across Enterprise and Cloud. You will align with Detection & Response teams to improve identity threat visibility and automated containment, and you will collaborate heavily with HR and Enterprise Applications to ensure identity data flows securely from the ultimate source of truth.","description_format":"text","description_chars":5095,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"Spain","iso":"ES","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Payment Processing & Gateways","Currency Exchange & FX Payments"],"lifecycle":[{"event":"open","at":"2026-07-22T12:09:02Z"}],"visa":[],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.879,"p_room":0.72,"age_days":86,"expected_fill_days":136,"reasons":["conf:1","urgency","win:mid","crowd:"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/dlocal-principal-security-engineer-identity-access","json_url":"https://alion.io/job/dlocal-principal-security-engineer-identity-access.json","meta":{"generated_at":"2026-10-17T15:24:11Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":20804,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-18T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":6586},"rest":"https://alion.io/mcp/rest/get_company?id=6586"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdlocal-principal-security-engineer-identity-access"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdlocal-principal-security-engineer-identity-access"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdlocal-principal-security-engineer-identity-access"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/dlocal-principal-security-engineer-identity-access\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdlocal-principal-security-engineer-identity-access"}]}