Infosec / Compliance Specialist

Job description

**This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Infosec / Compliance Specialist based in Brazil.** Take ownership of security, identity, governance, and compliance initiatives across modern cloud-native and enterprise environments. This mid-senior role combines information security expertise with identity and access management, DevSecOps, and regulatory readiness. You will design secure authentication and federation solutions while strengthening access controls across complex platform boundaries. Your work will also help embed security practices directly into development workflows through automated controls and tooling. You will contribute to vulnerability management, audit preparation, and compliance programs aligned with recognized industry frameworks. Working closely with engineering, platform, and operations teams, you will help continuously strengthen the organization’s overall security posture. This is an opportunity to make a meaningful impact in a globally distributed, technology-driven environment. ### Accountabilities: - Architect and implement enterprise Single Sign-On (SSO) solutions using Keycloak, SAML 2.0, and OpenID Connect (OIDC). - Configure Microsoft Entra ID and Google Cloud Identity as identity brokers and establish effective identity federation across environments. - Implement centralized Role-Based Access Control (RBAC), Multi-Factor Authentication (MFA), and Zero Trust security policies across platform boundaries. - Lead GitHub Advanced Security initiatives, including Dependabot alerts, secret scanning, CodeQL/SAST, and branch protection enforcement. - Implement portable secrets management solutions and monitor service-to-service security mechanisms, including mutual TLS (mTLS), across Kubernetes cluster boundaries. - Lead audit readiness, vulnerability scanning, and compliance enforcement activities supporting frameworks such as SOC 2 and ISO 27001. - Partner with engineering, platform, and operations teams to integrate security controls throughout the software development lifecycle. - Drive continuous improvement of security governance, risk management, compliance practices, and the overall organizational security posture. **Requirements:** - Bachelor’s degree in Computer Science, Software Engineering, or a related technical discipline. - At least 5 years of experience in Information Security, Identity and Access Management, Compliance, DevSecOps, or a related field. - Deep hands-on experience with Keycloak administration, including realm configuration, user federation, and Identity Provider (IdP) mapping. - Strong knowledge of Microsoft Entra ID enterprise applications and Google Identity Platform. - Experience enforcing security policies across multi-tenant Kubernetes clusters and cloud environments. - Familiarity with GitHub Advanced Security and automated DevSecOps security tooling. - Strong understanding of SAML 2.0, OpenID Connect (OIDC), identity federation, and authentication protocols. - Experience implementing RBAC, MFA, Zero Trust architectures, and cloud security best practices. - Knowledge of vulnerability management, audit readiness, and compliance frameworks such as SOC 2 and ISO 27001. - Excellent analytical, problem-solving, and risk assessment capabilities. - Excellent English communication skills and the ability to collaborate effectively with globally distributed, cross-functional teams. - Availability to work from 11:00 AM to 8:00 PM. **Benefits:** - Full-time employment opportunity. - Fully remote work model. - Opportunity to work across cloud-native and enterprise security environments. - Exposure to identity federation, DevSecOps, Kubernetes security, cloud security, and enterprise compliance initiatives. - Opportunity to contribute directly to audit readiness, governance, risk management, and continuous security improvement. - Collaboration with globally distributed engineering, platform, and operations teams.