Senior Identity Security Engineer (Remote - LATAM)

Atmosera empowers businesses to redefine what's possible with modern technology and human expertise. Our exceptional experience across Applications, Data & AI, DevOps, Security, and the Microsoft Azure platform enables organizations to accelerate innovation, enhance security, and optimize operational agility.

As a Microsoft Partner with seven specializations, GitHub AI Partner of the Year, a member of the GitHub Advisory Board, and a member of the prestigious Microsoft Intelligent Security Association (MISA), Atmosera expertly delivers cutting-edge, integrated solutions that deliver business value.

The Senior Identity Security Engineer will lead the design, security, and modernization of the organization's identity platform across Active Directory, Microsoft Entra ID, and cloud security services. This role is responsible for strengthening identity security, reducing legacy authentication risk, improving governance, and supporting Zero Trust initiatives across hybrid environments. The position requires deep technical expertise, strong problem-solving skills, and the ability to translate security requirements into scalable identity solutions.

Key Responsibilities

Design, secure, and optimize hybrid Active Directory and Microsoft Entra ID environments. Assess and remediate identity security risks, privileged access issues, and authentication vulnerabilities. Lead modernization initiatives involving NTLM, Kerberos, Conditional Access, SAML, OIDC, and SCIM.

Implement and support identity governance processes, including Joiner-Mover-Leaver (JML), entitlement management, and access reviews. Configure and integrate Microsoft security technologies including Defender for Identity, Sentinel, and Identity Protection. Develop identity security standards, roadmaps, and technical recommendations.

Collaborate with infrastructure, security, and application teams to improve identity architecture and operational maturity. Support audits, compliance initiatives, and security assessments.

Required Qualifications

5+ years of Identity and Access Management (IAM) experience. Strong experience with: Active Directory Microsoft Entra ID (Azure AD) Hybrid Identity Conditional Access Privileged Identity Management (PIM) Microsoft Defender for Identity Microsoft Sentinel Experience with modern authentication protocols including SAML, OAuth, OpenID Connect, and SCIM.

Strong PowerShell scripting and automation skills. Experience implementing identity governance and privileged access controls. Understanding of Zero Trust security principles and Microsoft security best practices.

Preferred Qualifications

Microsoft Certifications (SC-300, SC-200, AZ-500, SC-100) CISSP or equivalent security certification Experience with Microsoft Purview, CyberArk, SailPoint, or Okta Experience supporting enterprise security and compliance initiatives