Responsible for designing, implementing, and maintaining robust Identity and Access Management (IAM) solutions. This role ensures secure, compliant, and efficient authentication and authorization processes across hybrid and multi‑cloud environments. The position requires strong technical expertise, hands‑on experience with modern IAM platforms, and the ability to act as a technical reference for IAM architecture.

What You'll Do

• Design, evolve, and maintain the companys IAM architecture aligned with security best practices.
• Implement and maintain RBAC (Role-Based Access Control) models.
• Manage and configure IAM tools such as Okta and Ping Identity.
• Ensure secure integration of internal and external applications with IAM solutions.
• Develop automation scripts for provisioning, deprovisioning, and access reviews using Python, PowerShell, or similar languages.
• Operate IAM services within AWS and support expansion into Azure.
• Apply secure identity practices across multi‑cloud environments.
• Implement and maintain IAM governance, policies, and regulatory compliance processes.
• Support internal and external audits and access review cycles.
• Collaborate with engineering, security, and business teams to ensure secure and efficient identity workflows.

This is a remote position. A remote position does not require job duties be performed within proximity of a Visa office location. Remote positions may be required to be present at a Visa office with scheduled notice. #LI-Remote

Basic Qualifications

• Be based in Brazil.
• English (B2).
• Bachelors degree in computer science, Engineering, Information Systems, or related field.
• Solid hands on experience with IAM platforms, including Okta, Ping Identity or Microsoft Entra ID.
• Strong knowledge of RBAC methodologies and access management practices.
• Experience with cloud environments, Azure knowledge preferred.
• Familiarity with authentication and authorization protocols (SAML, OAuth 2.0, OpenID Connect).
• Ability to work independently as well as in distributed, multicultural teams.
• Strong analytical and communication skills for interaction with business, technical teams, and auditors.
• Experience integrating IAM controls into DevSecOps or CI/CD pipelines.

Preferred Qualifications

• Knowledge of Zero Trust Architecture.
• Certifications such as Okta Certified Professional, Ping Identity, AWS Security Specialty, Microsoft Identity and Access Administrator. 
• Proficiency in automation and scripting (Python, PowerShell, or Bash).

Visa is an EEO Employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability or protected veteran status. Visa will also consider for employment qualified applicants with criminal histories in a manner consistent with EEOC guidelines and applicable local law.