Principal Security Engineer – Identity & Access

About the role

dLocal is looking for a Principal Security Engineer to lead the evolution of its identity and access management program. You will own the design and delivery of a highly automated, scalable identity governance platform that supports the company’s rapid global growth.

Key responsibilities

• Engineer a fully automated Joiner‑Mover‑Leaver (JML) workflow, access certifications and Separation of Duties (SoD) controls.
• Design and scale authentication and authorization foundations across cloud, SaaS and on‑premise environments, leveraging SAML, OAuth2, OpenID Connect and SCIM.
• Drive adoption of Zero Trust architecture and Adaptive Multi‑Factor Authentication (MFA) enterprise‑wide.
• Lead identity integration for mergers, acquisitions and large‑scale transformation initiatives.
• Hands‑on implementation: configure integrations, write RBAC policies, build IGA platform pipelines and resolve complex access flows.

Required profile

• Proven senior technical leader with a pragmatic, high‑agency mindset.
• Strong experience building automated identity governance and access management solutions at scale.
• Ability to work independently, roll up sleeves and deliver end‑to‑end solutions.

Required skills

• SAML
• OAuth2
• OpenID Connect
• SCIM
• Zero Trust architecture
• Adaptive MFA
• RBAC policy design
• IGA platforms (e.g., SailPoint, Okta, Azure AD)

What we offer

• Opportunity to shape a critical security function in a fast‑growing fintech.
• Collaborative global team with diverse cultures.
• Impact on millions of users worldwide.