Senior Cyber Security Analyst

You will design, operate, and evolve RecargaPay's access controls for human and non-human identities across corporate applications and the cloud. The scope covers the complete identity lifecycle (joiner, mover, leaver) and identity governance and administration (IGA) in SailPoint, with role modeling, policies, segregation of duties, and certification campaigns. It includes privileged access management (PAM), service account control, tokens and API keys, AWS IAM privilege control (roles, policies, federation, and permission boundaries), and identity and SSO administration in Google Workspace. You will also expand IDM coverage across applications by integrating those that support SAML, OIDC, or SCIM, while controlling those using local authentication and accounts, and automating provisioning, deprovisioning, and approval workflows using N8N. All of this under the principles of need-to-know, least privilege, and Zero Trust: every access has a justification, expiration date, and owner, and none is trusted by default. We expect senior autonomy to diagnose access risks, define the solution, and deliver with audit evidence. RESPONSIBILITIES Apply the principles of need-to-know (access only to what is necessary for the role) and least privilege in designing roles, policies, and approvals, ensuring that every access has a business justification and review timeline. Own identity governance in SailPoint: connectors, data sources, access policies, roles, and certification campaigns.