IAM Information Systems Engineer 2

Wex · Brazil Sao Paulo - Remote Office · 3 days ago

Work mode: Remote
Category: Security

active-directory api automation data-quality entra-id iam jdbc power-automate powershell python rbac rest rpa

Key Responsibilities & Deliverables:

Payload Engineering & Sanitization ('Connector Factory'): Develop and maintain PowerShell, Python, and SQL data-transformation scripts that extract, clean, and format messy application account/entitlement data into standardized SCIM, REST API, or JDBC payload packages for SailPoint ingestion.

Application Payload Migration: Partner directly with decentralized business application teams to resolve data quality issues, eliminate non-standard local User IDs, and achieve 100% Workday WID account correlation prior to platform configuration.

RBAC / ABAC Role Construction: Analyze sanitized entitlement payloads to build structured Role-Based and Attribute-Based Access Control models in SailPoint, replacing unmanaged static entitlements with business-friendly role bundles.

Toil Elimination & Automation: Deploy PowerShell/Python scripts, REST API integrations, and RPA (Robotic Process Automation) bots to replace manual ticket-driven administrative processes with automated self-service workflows.

Compliance Alignment & Stakeholder Influence: Act as a compliance ambassador; educate application owners on SOX/SOC rules, Segregation of Duties (SoD) risks, and audit evidence standards to secure cooperation and meet sprint integration deadlines.

Qualifications, Key Attributes & Technical Stack:

Experience: Experience in IAM engineering, payload integration, or directory automation.

Self-Sufficiency & Autonomy: Highly self-directed problem solver who takes full ownership of application onboarding pipelines from discovery to production validation with minimal supervision.

Multi-Tasking & Agility: Proven capability to manage and juggle multiple parallel application onboarding streams (3–5 apps concurrently), script development tasks, and operational escalations simultaneously in a high-velocity environment.

Stakeholder Partnership & Influence: Strong collaborative partnership skills; ability to influence non-technical Application Owners to prioritize data sanitization, resolve correlation blockers, and meet sprint commitments.

Technical Stack: Advanced PowerShell, Python, SQL, REST/SCIM APIs, RPA (UiPath / Power Automate), SailPoint (IIQ or ISC), Active Directory/Entra ID, and ITSM frameworks.

Explore more jobs

Key Responsibilities & Deliverables:

Qualifications, Key Attributes & Technical Stack: