Identity and Access Engineer

Description

Position Summary: We are seeking an Identity and Access Management (IAM) Engineer with cybersecurity experience to design, implement, and manage IAM solutions in cloud, hybrid, and on-premise environments, and configure authentication integrations. Key Highlights: 1. IAM solution design and implementation 2. Authentication and SSO configuration 3. Process automation using scripting Capital Empresarial Horizonte, a Mexican company specializing in Human Resources and Information Technologies, is looking for: Identity and Access Engineer (IAM) **Conversational English required** **Hybrid work model in Guadalajara (2 days onsite, 3 days remote)** ### **Requirements** * Proven experience in IAM or cybersecurity roles. * Proficiency in protocols: * **OAuth2** * **OpenID Connect (OIDC)** * **SAML 2\.0** * **SCIM** * Practical experience with **Ping Identity** solutions. * Knowledge of integration with SaaS applications, APIs, and corporate directories (LDAP/Active Directory). * Experience working in cloud environments (AWS, Azure, or GCP). * Familiarity with security standards and Zero Trust principles. * Ability to automate processes using scripting (PowerShell, Python, Bash, etc.). * Advanced English proficiency. ### **Main Responsibilities** * Design, implement, and administer **Identity \& Access Management (IAM)** solutions for cloud, hybrid, and on\-premise applications. * Configure and maintain authentication and Single Sign\-On (SSO) integrations using **OAuth2**, **OpenID Connect (OIDC)**, and **SAML 2\.0**. * Implement and automate user provisioning and deprovisioning processes using **SCIM**. * Administer identity platforms such as **Ping Identity** (PingFederate, PingAccess, PingOne, among others). * Collaborate with security, infrastructure, and development teams to ensure secure and scalable access controls. * Define multi-factor authentication (MFA), access control, and session management policies. * Resolve incidents and issues related to authentication, federation, and identity management. * Participate in security audits and regulatory compliance reviews. * Document architectures, authentication flows, and security best practices. ### **Desirable** * Certifications related to IAM or security. * Experience with MFA, CIAM, or PAM. * Knowledge of DevSecOps and CI/CD automation. ### **We Offer:** * Office hours with a **hybrid work model** * **100% payroll-based employment** * Competitive salary based on experience * Statutory and enhanced benefits: Family SGMM, Life Insurance ($1,000,000), Grocery Vouchers, 30-day Christmas bonus, Profit Sharing (PTU)