Mid-Level Security Engineer (IAM)

About the role

EBANX is one of the most successful fintechs to emerge from Latin America — and today, we are building a truly global payments company. Our mission has remained constant from day one: to unlock access and enable companies and consumers to participate in the digital economy, no matter where they are.

What started as a bold vision has grown into a platform that connects some of the world’s largest digital businesses with customers across 23+ of the fastest-growing markets. We operate where complexity exists — turning local challenges into global opportunities, and building the infrastructure that allows payments to move further, faster, and smarter.

We are a team of builders and problem-solvers. We think globally, act with curiosity, and believe diversity of thought is a competitive advantage.

As EBANX enters its next phase of hyper growth, we are looking for people who want to shape the future of payments, expand what’s possible, and help connect businesses and consumers across borders. Let’s build what’s next — together.

At EBANX’s IT team you don’t just manage systems and infrastructure. You ensure that our technology, which connects millions of people to global companies, runs flawlessly every day. Here, every solution you create has a direct impact on the revolution of digital payments, making our work truly Out Of The Ordinary.

What your day-to-day will look like

- Design and build automations for the identity lifecycle (joiner/mover/leaver, access reviews, segregation-of-duties remediation), replacing manual processes with code;

- Integrate target systems into our identity governance platform (SailPoint) through APIs and custom connectors, and evolve access controls in Entra ID, AWS and GCP, preferably as code;

- Investigate and resolve access problems end to end, from symptom to root cause, across cloud, SaaS and internal systems;

- Build internal tools, scripts and AI agents that reduce the team’s operational load, and support audit evidence and remediations (PCI-DSS, ISO 27001, external audits) with automated data extraction.

What you need to shine in this role

- Hands-on experience with an identity governance platform (SailPoint, Saviynt, Okta, One Identity or similar), covering provisioning, access certification and integration with target systems;

- Python proficiency applied to automation, API consumption and identity data processing, plus Git and infrastructure-as-code practices;

- Experience with Microsoft Entra ID and with IAM in at least one cloud provider (AWS or GCP);

- Practical use of generative AI and agents in engineering work, and understanding of segregation of duties and access controls in business processes;

- Intermediate to Advanced English for technical reading and vendor communication.

Bonus points if you have

- Experience building AI agents or integrations with LLM APIs and MCP;

- Certifications such as Microsoft SC-300, SailPoint Identity Security Cloud, AWS or GCP Security.