Sr. Cyber Security Analyst - RecargaPay

You will design, operate, and evolve RecargaPay's access controls for human and non-human identities across corporate applications and the cloud. The scope covers the complete identity lifecycle (joiner, mover, leaver) and identity governance and administration (IGA) in SailPoint, featuring role modeling, policies, segregation of duties, and certification campaigns.

Responsibilities

• Identity Governance (SailPoint): Own connectors, data sources, access policies, roles, and certification campaigns. Ensure end-to-end identity lifecycle management with reliable timelines and audit trails.
• Privileged Access Management (PAM): Inventory privileged accounts, define grant rules (on-demand and approved access), credential rotation, monitoring, and periodic reviews.
• Non-Human Identities: Manage service accounts, robots, integrations, API keys, tokens, and application credentials, including ownership, inventory, rotation, expiration, and orphan account cleanup.
• IDM Coverage & Applications: Expand IDM coverage by integrating apps that support SAML, OIDC, or SCIM, while controlling and migrating local authentication apps when possible.
• Cloud & Directory Security: Administer Google Workspace identities, groups, OUs, security policies, SSO, and MFA. Review and reduce privileges in AWS IAM (users, roles, policies, federation, permission boundaries).
• Automation: Design and maintain N8N automations to integrate systems, orchestrate requests/approvals, and eliminate manual provisioning tasks.
• Zero Trust Architecture: Contribute to the evolution of Zero Trust with a focus on identity, explicit verification, continuous access, MFA, and context-based reviews.
• Audits & Metrics: Conduct periodic access reviews, support internal/external audits, deliver evidence, and track access metrics (provisioning time, orphan accounts, privileged access coverage).

Requirements

• Solid, proven experience in Identity and Access Management (IAM/IGA) within corporate environments, preferably in tech or financial services.
• Practical experience with SailPoint (IdentityIQ or Identity Security Cloud).
• Mastery of Google Workspace administration and privileged access management (PAM) tools/vaults.
• Experience managing service accounts and non-human identities in cloud and on-premise environments.
• Practical knowledge of IDM integrations (SAML, OIDC, SCIM) and AWS IAM (policies, roles, federation, boundaries).
• Experience building low-code automations and integrations using N8N (or equivalent).
• Deep understanding of access control models (RBAC, ABAC), segregation of duties, and Zero Trust principles.
• Nice-to-haves: Experience with CyberArk, HashiCorp Vault, or AWS Secrets Manager; Python or JS scripting; Okta or Entra ID knowledge; SailPoint/AWS Security certifications; regulated industry experience (Central Bank, PCI DSS, ISO 27001); AI/LLM automation experience for access reviews.