Senior IT Analyst

Role overview

A senior IT analyst is needed to operate and strengthen the technology environment that supports distributed teams across the Americas region. The role combines infrastructure ownership, security hardening, and automation, with the autonomy to identify gaps and drive initiatives end-to-end alongside regional IT leadership. It suits someone who plans thoroughly, documents carefully, and proactively proposes improvements rather than waiting to be assigned work.

Responsibilities

- Manage the end-to-end device lifecycle for macOS via Jamf and Windows environments, including provisioning, configuration, compliance, and keeping standards consistent across countries. - Administer identity and collaboration platforms such as Google Workspace and Microsoft Entra ID, covering SSO, MFA, access policies, and joiner/mover/leaver workflows. - Operate and evolve cloud infrastructure on GCP and Azure, including identity and access management, resource organization, monitoring, and cost optimization work that flags waste. - Strengthen security controls through endpoint hardening, encryption, patch and vulnerability management, access reviews, incident support, and gathering evidence for client security assessments. - Automate recurring operational tasks using scripting and system APIs, replacing manual routines with reliable, well-documented processes. - Govern the SaaS portfolio, including licenses, renewals, vendors, and usage, with cost and adoption data guiding each decision. - Review existing tools, processes, and configurations, then propose and implement changes that simplify operations, reduce risk, or improve the experience of internal teams. - Act as escalation point for complex technical issues and serve as a reference for internal IT standards, runbooks, and documentation. - Keep initiatives organized with clear timelines, communicating progress, risks, and trade-offs to both technical and non-technical audiences.

Requirements

- Solid background in IT infrastructure, corporate IT, or endpoint engineering supporting distributed teams. - Hands-on experience managing macOS fleets with Jamf, plus device management experience in Windows environments. - Practical knowledge of GCP and Azure, including IAM and cost management. - Strong information security fundamentals applied to day-to-day operations. - Automation mindset with scripting skills in Bash, Python, or PowerShell and comfort working with APIs. - Ability to lead initiatives from first proposal through implementation and to suggest improvements to what is already in place. - Organized and methodical approach, with strong documentation habits and the capacity to manage several parallel demands.

Nice to have

- Experience in consulting or professional services, supporting teams that work under client security requirements. - Fluent English for daily collaboration with international teams. - Familiarity with LGPD, ISO 27001, or comparable compliance frameworks. - Infrastructure-as-code and configuration management experience. - Background supporting rapid growth or integration of newly acquired teams. - Relevant certifications such as Jamf, Google Workspace Administrator, Microsoft, or cloud/security credentials.

Benefits and work setup

- Remote-first arrangement with optional access to a physical office in São Paulo. - Meal allowance, plus health, dental, and life insurance coverage. - Wellness benefit through a gym and fitness platform. - Flexible coworking access that lets the role be worked from anywhere. - Bi-monthly team gatherings featuring workshops, training, and informal social time. - Semi-annual performance reviews with opportunities for promotion.