IT Operations Analyst

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for an IT Operations Analyst based in Brazil.

This is an engineering-focused IT operations role responsible for building and improving the technology environment that enables employees to work securely and efficiently.
You’ll own key areas including identity, endpoints, SaaS administration, device management, and secure access.
A major focus will be automation—using code, APIs, infrastructure-as-code, and AI-assisted workflows to eliminate repetitive operational work.
You’ll also help establish mature service management practices around incidents, changes, documentation, metrics, and operational readiness.
The role combines reliability, security, and continuous improvement in a predominantly macOS and ChromeOS environment.
You’ll have significant autonomy to identify operational friction, solve root causes, and make internal technology increasingly scalable and dependable.
It’s an ideal opportunity for someone who thinks like an engineer and wants to build systems rather than simply respond to tickets.

• Own the lifecycle of corporate technology, including Google Workspace, identity providers, MDM, SaaS applications, endpoint standards, asset management, and joiner–mover–leaver processes.

• Administer and continuously improve identity and access environments, working with technologies such as Okta or equivalent IdPs, SSO, SAML, SCIM, DNS, and certificates.

• Operate and enhance Zero Trust capabilities, including ZTNA, Secure Web Gateway, DNS filtering, tunnels, and identity- and device-aware access policies.

• Maintain secure access to internal applications and services while troubleshooting connectivity and access issues and minimizing unnecessary employee friction.

• Build internal automation and tooling using Python, Apps Script, REST APIs, Terraform, n8n, and AI-assisted workflows to eliminate repetitive manual processes.

• Establish and improve service management practices covering incident, problem, and change management, service catalogs, knowledge bases, service metrics, capacity planning, and operational readiness.

• Drive endpoint reliability through zero-touch provisioning, compliance baselines, fleet health monitoring, reporting, SaaS governance, and self-service capabilities.

• Deploy and maintain operational security controls, harden endpoints, support security incidents, maintain current security baselines, and reduce operational risk.

• Identify recurring operational problems and improve the underlying systems and processes rather than simply resolving individual requests.

Requirements

• Demonstrated experience administering enterprise SaaS, identity, and endpoint-management environments at organizational scale.

• Hands-on experience with Google Workspace or Microsoft 365, an identity provider such as Okta or Entra, and MDM platforms such as Kandji, Jamf, or similar.

• Practical understanding of SSO, SAML, SCIM, DNS, certificates, identity security, and secure access principles.

• Experience with Zero Trust technologies such as ZTNA, Secure Web Gateway, or modern network access controls; familiarity with Cloudflare Zero Trust, Zscaler, Netskope, Tailscale, or Entra Private Access is advantageous.

• Ability to troubleshoot and take ownership of an existing Zero Trust environment while continuously improving its reliability and usability.

• Strong automation mindset, with experience writing code in Python, Apps Script, or a similar language and working confidently with REST APIs.

• Proven ability to build internal tools or workflows that permanently reduce recurring manual work.

• Experience managing macOS fleets, zero-touch provisioning, endpoint compliance, and device-security baselines.

• Experience with service operations, including incident and change management, operational metrics, documentation, and knowledge management.

• Solid security and infrastructure fundamentals, including endpoint hardening, identity security, DNS, certificates, and secure network access.

• Strong process-improvement instincts, analytical thinking, and a willingness to challenge inefficient ways of working.

• Experience with Terraform or other Infrastructure as Code, Cloudflare, n8n, AI/LLM-assisted workflows, Chrome Enterprise, or deep macOS administration is a plus.

• Exposure to security-first or audited environments such as SOC 2 or ISO 27001 is advantageous.

• Strong communication, ownership, troubleshooting, and continuous-learning skills are expected.

Benefits

• Fully remote working environment, with no mandatory office attendance.

• Monthly lifestyle subsidy supporting financial, physical, and mental well-being.

• Work-from-home setup allowance available during the first three months.

• $1,500 USD annual Learning & Development allowance for professional development.

• Paid time off plus two additional company leave days.

• 18 weeks of paid parental leave, regardless of parenting role.

• Personal leave allowance covering sick and carer’s leave.

• Top-spec laptop and hardware provided for your role.

• Generative AI subsidy providing access to paid AI tools and subscriptions.

• Access to comprehensive health insurance coverage.

• Opportunity to work in a global technology environment focused on engineering, automation, security, and continuous improvement.

We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.

We appreciate your interest and wish you the best!

Why Apply Through Jobgether?

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1