---
title: 'Principal Security Engineer – Identity & Access at dLocal'
canonical: 'https://feeny.ai/job/principal-security-engineer-identity-access-dlocal-madrid-2m68xcmcmg14'
type: 'job'
last_seen: '2026-09-09'
---

# Principal Security Engineer – Identity & Access at dLocal

- **Company:** dLocal
- **Location:** Madrid, Spain
- **Employment:** full-time
- **Work type:** hybrid
- **Posted:** 2026-07-22
- **Last confirmed live:** 2026-09-09
- **Apply:** https://jobs.lever.co/dlocal/927a5f7c-4dd3-418f-9914-bed5afa9da0a

## Job description

Why Join dLocal?dLocal is the financial infrastructure powering global commerce in the world's fastest-growing markets. The biggest companies in the world trust us to unlock growth in 60+ countries across emerging markets—moving money where others see complexity. We don't just process payments; we are architects of payment ecosystems and partners in our customers' expansion. You'll work alongside 1,300+ teammates from 40+ nationalities and tackle global challenges from day one.

## About Us & The Role

We are not building a traditional, bureaucratic identity and access management function. We are building a modern, highly automated identity security program—and we need a sharp, relentless operator to build it.

Identity is the new perimeter, and managing how our global workforce accesses enterprise systems is one of our highest priorities. We are looking for a Principal Security Engineer – Identity & Access to help drive our identity evolution alongside our existing senior engineering team. You will be walking into a rapidly evolving ecosystem that has outgrown its early identity frameworks. Your mandate is to take that complex web of legacy entitlements and build a highly scalable, automated identity governance machine.

This is not an "ivory tower" strategy role. We do not need someone to draw Visio diagrams and hand them off to junior admins. We need a pragmatic, high-agency builder who helps design the strategy but has the zero-ego grit to execute it with their own hands.

## What You'll Do

- Engineer the Identity Lifecycle (JML & SoD): Take on our workforce identity and access ecosystem. You will engineer a highly automated Joiner-Mover-Leaver (JML) machine, implementing robust access certifications, Separation of Duties (SoD), and unified IGA frameworks that scale with our hyper-growth.

- Federation, Zero Trust & Integration: Design and scale our authentication and authorization foundations across cloud, SaaS, and on-premise environments. You will lead identity federation leveraging SAML, OAuth2, OpenID Connect, and SCIM, while driving the adoption of Zero Trust architecture and Adaptive MFA across the enterprise.

- M&A & Enterprise Transformation: As a rapidly expanding global fintech, we acquire and scale. You will lead the identity integration strategy for mergers, acquisitions, and massive enterprise transformation initiatives, securely and seamlessly folding new organizations into our identity ecosystem.

- Zero-Ego Execution: As a senior technical anchor on the team, you lead by example. You will get your hands dirty. You will configure the integrations, write the RBAC policies, engineer the IGA platforms, and untangle access flows yourself.

- Codify Governance & Shift Left: You will design self-service identity workflows, automated controls, and identity KPIs that force business leaders (the first line of defense) to explicitly own and accept their access risks. You translate written compliance policies into code.

- Be the IAM Diplomat: When you change how developers and commercial teams authenticate, there is always friction. You will be a key face of our identity transformation. You must have the extreme patience, persistence, and EQ to negotiate with engineering directors, bringing them along and enforcing security without alienating them.

## What You Bring

- Resilient Problem Solver: You don't get stuck. Where others see a messy legacy setup, you see an exciting puzzle. You don't get paralyzed or frustrated by organizational friction; you thrive on using the latest technologies and original thinking to solve long-standing identity problems.

- Track Record Over Tenure: We do not care about arbitrary "years of experience." We care about outcomes. You must have a proven track record of designing, building, or scaling Identity and Access programs in fast-paced, complex environments.

- Deep IGA & Protocol Expertise: You possess solid, hands-on experience with modern workforce identity systems, lifecycle processes (JML, SoD, Certifications), protocols (SAML, OIDC, OAuth2, SCIM), RBAC/ABAC models, and enterprise identity platforms (e.g., SailPoint, Saviynt, Okta).

- Pragmatic Operator Mindset: You understand that security cannot kill velocity. You know how to find the critical balance between enforcing strict, least-privilege security and maintaining high usability for the business.

- Disciplined Multi-Threading: You are ruthlessly organized, capable of driving an enterprise identity strategy while simultaneously troubleshooting an immediate, ground-level access escalation.

- Force Multiplier: You elevate the engineers around you. You bring strong mentoring, leadership, and documentation capabilities, ensuring that the systems you design are highly scalable, well-understood, and easily maintained by the wider organization.

## Nice to Have

- Experience navigating the identity and access requirements of highly regulated environments (PCI-DSS, SOX, SOC 2).

- Familiarity with machine identity governance, secrets management, and API access.

- Relevant industry certifications demonstrating your dedication to the identity domain.

## Your Cross-Functional Surface Area

You will not work in a silo. You will partner deeply with Enterprise IT Service Desk, Application owners, Cloud Platform, and Infrastructure teams to govern access across Enterprise and Cloud. You will align with Detection & Response teams to improve identity threat visibility and automated containment, and you will collaborate heavily with HR and Enterprise Applications to ensure identity data flows securely from the ultimate source of truth.

What do we offer? Besides the tailored benefits we have for each country, dLocal will help you thrive and go that extra mile by offering you:

- Flexibility in how you work: We focus on impact and productivity over fixed hours. This means our teams have flexible schedules and, depending on your role and location, you will combine self‑managed focus time with moments of in‑person connection in our collaboration hubs.
- Fintech industry: work in a dynamic and ever-evolving environment, with plenty to build and boost your creativity.
- Referral bonus program: our internal talents are the best recruiters - refer someone ideal for a role and get rewarded.
- Work From Anywhere: Team members can work while traveling for up to 3 months every year.

What happens after you apply? Our Talent Acquisition team is invested in creating the best candidate experience possible, so don’t worry, you will definitely hear from us. We will review your CV and keep you posted by email at every step of the process!

Also, you can check out our webpage, Linkedin and Youtube for more about dLocal!

## About dLocal

## Company Overview
- **One-liner**: dLocal provides a cross-border payment platform that enables global merchants to accept payments and disburse payouts in emerging markets through a single API.
- **Entity Type**: Public (Nasdaq: DLO)
- **Headquarters**: Montevideo, Uruguay
- **Founded**: 2016
- **Founders**: Sebastián Kanovich (former CEO), Sergio Fogel, Andrés Bzurovski, and Federico Pfeifer

## Core Business
- **Primary industry/industries**: Financial technology (Fintech), Payment Infrastructure
- **Target customers**: B2B; global e-commerce merchants, digital platforms, marketplaces, and enterprises seeking to expand into emerging markets
- **Mission or purpose statement**: To close the payments innovation gap between international businesses and emerging economies.

## Products & Services
- **Payins**: Accept local payment methods (credit/debit cards, cash, bank transfers, digital wallets) across 60+ countries, with dynamic FX conversion, to boost conversion rates.
- **Payouts**: Disburse funds to local bank accounts, digital wallets, and other methods in emerging markets.
- **dLocal for Platforms**: A solution for global marketplaces to onboard users, accept, send, and split funds between multiple users across high-growth markets.
- **Defense Suite**: A comprehensive fraud management solution designed to minimize financial loss and build merchant reputation.
- **Direct Issuing**: Enables merchants to issue virtual and physical cards in local markets.

## Market Standing
- **Valuation/Market Cap**: As a public company, market cap fluctuates. As of early 2025, it was roughly in the $2-3 billion range (check latest figures).
- **Key Metric**: Processed **$41 billion** in payment volume in 2025. Annual revenue is publicly reported in SEC filings (10-K/10-Q), with recent reports showing strong growth.
- **Notable Investors/Partners**: Key investors include Alkeon Capital, General Atlantic, and others. Major merchants include global giants like Uber, Amazon, and Spotify.
- **Growth Signals**: Expanded to over 1,000 payment methods and operations in 44+ countries as of 2025; team has grown to over 1,200 employees; continues to expand into Africa, Asia, and Latin America.

## Competitive Advantages
- **Deep Local Expertise**: Has "boots on the ground" in every region where they process payments, offering superior compliance, KYC, and local regulatory knowledge.
- **Single API, Broad Coverage**: A single integration provides access to 1,000+ payment methods in 60+ countries, simplifying a highly complex landscape.
- **AI-Powered Smart Routing**: Uses AI to optimize transaction routing for higher conversion rates, with robust fallback and redundancy.
- **First-Mover Advantage**: Pioneer in the cross-border payments space for emerging markets, building a strong network effect with merchants and local partners.

## Strategic Focus
- **Geographic Expansion**: Continuing to expand payment coverage in Africa, Asia, and Latin America.
- **Product Innovation**: Enhancing the platform with AI-driven fraud prevention, smart routing, and new financial products like direct issuing.
- **Platform Economics**: Deepening relationships with large global merchants and expanding the "dLocal for Platforms" offering to capture marketplace and platform payment flows.

## Why Work Here
- **Culture ("dLocal Drive")**: The company seeks ambitious people who thrive in a fast-paced, high-adrenaline environment with a focus on making the "impossible happen."
- **Remote/Hybrid Policy**: Offers flexible schedules and a "Work From Anywhere" policy allowing employees to work from anywhere for up to 3 months per year. Many roles are hybrid (Buenos Aires, Montevideo, Sao Paulo, Madrid, London, etc.).
- **Global Team**: A diverse team of over 1,200 professionals from around the world, with a strong presence in Latin America, Africa, and Asia.
- **Benefits**: Includes a referral bonus program, learning & development tools, a social budget for team connection, and a focus on global talent with local expertise.
- **Growth Opportunity**: Working at a public company with a strong growth trajectory provides exposure to complex global challenges and career advancement in a high-impact fintech.

## Sources
1. [dlocal.com](https://www.dlocal.com/)
2. [dlocal.com - About Us](https://www.dlocal.com/company/about-us/)
3. [dlocal.com - Careers](https://www.dlocal.com/careers/)
4. [investor.dlocal.com](https://investor.dlocal.com/)
5. [jobs.lever.co/dlocal](https://jobs.lever.co/dlocal)

## Other roles at dLocal

- [Business Continuity Specialist](https://feeny.ai/job/business-continuity-specialist-dlocal-nairobi-307b0e2v3g1t) — Nairobi, Kenya
- [Execution & Enablement Specialist](https://feeny.ai/job/execution-enablement-specialist-dlocal-buenos-aires-95xcvmed049h) — Buenos Aires, Argentina
- [Account Manager](https://feeny.ai/job/account-manager-dlocal-buenos-aires-63ysezm6mhpa) — Buenos Aires, Argentina
- [Technical Lead - Java](https://feeny.ai/job/technical-lead-java-dlocal-barcelona-y30nh79a3mfd) — Barcelona, Spain
- [Data Specialist for Compliance — Transaction Monitoring & Financial Crime](https://feeny.ai/job/data-specialist-for-compliance-transaction-monitoring-financial-crime-dlocal-az44q5w4386w) — Madrid, Spain
- [Staff Engineer - Java](https://feeny.ai/job/staff-engineer-java-dlocal-barcelona-1zhq83mjpfjf) — Barcelona, Spain
- [Staff Engineer - Payments Performance](https://feeny.ai/job/staff-engineer-payments-performance-dlocal-barcelona-hb1vds026cak) — Barcelona, Spain
- [Legal Counsel - Corporate](https://feeny.ai/job/legal-counsel-corporate-dlocal-montevideo-mqgd3as8cqqk) — Montevideo, Uruguay
- [Platform Architect](https://feeny.ai/job/platform-architect-dlocal-madrid-cdhxj8vhzf83) — Madrid, Spain
- [Ethics & Compliance Officer](https://feeny.ai/job/ethics-compliance-officer-dlocal-montevideo-cjq8zm0f6p5r) — Montevideo, Uruguay