Access Engineering Specialist

Responsibilities

• Design and manage the complete identity and access lifecycle in multi-cloud environments (JumpCloud, Okta, Sailpoint, AWS IAM, Zscaler, etc.).
• Implement MFA, federation (SAML, OIDC), SCIM, and Single Sign-On (SSO) policies for critical SaaS services.
• Develop and automate provisioning, recertification, and offboarding workflows integrated with Jira and CI/CD pipelines.
• Audit privileged access and enforce Segregation of Duties (SoD) in compliance with PCI DSS 4.0, CNBV, and ISO 27001.
• Contribute to the Zero Trust identity strategy and integrate IAM with ZPA, Cloudflare Access, and SASE.
• Collaborate with Engineering, DevSecOps, and GRC teams to ensure security compliance and traceability.
• Generate security reports and IAM maturity indicators (KPI/KRI).

Requirements

• Degree in Cybersecurity, Systems, IT, or a related field.
• 3 to 5 years of experience in IAM, IGA, or PAM, preferably within FinTech or financial sectors.
• Strong knowledge of Zero Trust, SCIM, OAuth2, SAML, OIDC, and RBAC/ABAC models.
• Proficiency with tools such as JumpCloud, AWS IAM, Okta, Sailpoint, Azure AD, or ZScaler.
• Experience in automation using Python, PowerShell, or REST APIs.
• Technical English proficiency.

Preferred Qualifications

• Experience with regulatory compliance frameworks including PCI DSS, CNBV CUB, ISO 27001, and NIST.
• Relevant certifications such as AWS Security Specialty, Okta Professional, Sailpoint Administrator, CompTIA Security+, or CISM.

About the Company

Banorte is a leading financial institution dedicated to driving transformation and innovation in Mexico. We value solidarity, innovation, respect, loyalty, and responsibility as we work to grow alongside the country.