Principal Security Engineer – Identity & Access

About the role

dLocal is looking for a Principal Security Engineer to lead the evolution of its identity and access management program. You will own the design and implementation of a highly automated, scalable identity governance platform that supports the company’s rapid growth across cloud, SaaS, and on‑premise environments.

Key responsibilities

• Engineer a fully automated Joiner‑Mover‑Leaver (JML) lifecycle, including access certifications and Separation of Duties (SoD) controls.
• Design and scale authentication and authorization foundations using SAML, OAuth2, OpenID Connect, and SCIM.
• Drive adoption of Zero Trust architecture and Adaptive Multi‑Factor Authentication across the enterprise.
• Lead identity integration for mergers, acquisitions, and large‑scale transformation initiatives.
• Hands‑on implementation: configure integrations, write RBAC policies, and build IGA platform workflows.

Required profile

• Senior technical leader with a pragmatic, execution‑focused mindset.
• Proven experience building large‑scale identity governance and automation solutions.
• Ability to work independently and collaborate with senior engineering teams.
• Strong problem‑solving skills and willingness to get hands‑dirty on complex access flows.

Required skills

• SAML, OAuth2, OpenID Connect, SCIM
• Zero Trust architecture
• Adaptive Multi‑Factor Authentication (MFA)
• Role‑Based Access Control (RBAC) and Separation of Duties (SoD)
• Joiner‑Mover‑Leaver (JML) automation
• Identity Governance and Administration (IGA) platforms
• Identity federation across cloud, SaaS, and on‑premise systems