Analista de IAM

Who We Are

At Kyndryl, we design, build, manage and modernize the mission-critical technology systems that the world depends on every day. So why work at Kyndryl? We are always moving forward - always pushing ourselves to go further in our efforts to build a more equitable, inclusive world for our employees, our customers and our communities.

The Role

We are looking for an IAM (Identity and Access Management) Analyst to work on identity management, access control, and security controls in corporate environments. The professional will be responsible for implementing, maintaining, and optimizing IAM processes and tools, ensuring compliance with security policies, regulatory requirements, and the principle of least privilege.

The responsibilities of this role include administering and maintaining the identity and access management (IAM) platform, including full lifecycle control of identities such as provisioning, modification, revocation, and deprovisioning. It is also necessary to manage and review access to critical systems and corporate applications, as well as support the definition of roles, profiles, groups, and permissions based on best practices. Another key responsibility is the integration of IAM solutions with directories such as Active Directory and Azure AD, as well as with other corporate systems. The professional will be responsible for implementing and managing Single Sign-On (SSO) and Multi-Factor Authentication (MFA) policies, conducting periodic access reviews (certifications), and supporting internal and external audits. The work will be carried out in collaboration with the Information Security, Infrastructure, and Governance teams. Additionally, it is essential to document processes, workflows, and procedures related to access management, as well as monitor and investigate unauthorized access, risks associated with elevated privileges, and compliance deviations.

Your Future at Kyndryl
Every position at Kyndryl offers a path for career growth. We provide opportunities you won't find anywhere else, including hands-on experience, learning opportunities, and the chance to earn certifications from the four major hyperscaler platforms. Whether you're looking to expand your knowledge base or focus and specialize in a specific area, here you'll find your opportunity.

• Technical education in progress or completed
• Experience with IAM solutions (e.g., Microsoft Entra ID/Azure AD, SailPoint, Okta, CyberArk, etc.)
• Knowledge of Active Directory, LDAP, RBAC/ABAC, GPOs, and security groups
• Experience with automated/manual provisioning and deprovisioning processes
• Understanding of identity governance concepts, segregation of duties (SoD), and access auditing
• Experience with federated authentication, SAML, OAuth, OpenID Connect
• Ability to analyze risks related to access and user profiles
• Knowledge of security standards and frameworks (e.g., ISO 27001, LGPD, NIST, SOX)

• Scripting skills (PowerShell, Python) for automation
• Certifications such as:
  
  
  • Microsoft Certified: Identity and Access Administrator Associate (SC-300)
  • Certified Identity and Access Manager (CIAM)
  • Certified Information Systems Security Professional (CISSP)
• Experience with Zero Trust and Least Privilege Access projects
• Knowledge of Privileged Access Management (PAM)
• Undergraduate degree in progress
• Intermediate English proficiency