Information Technology Intern

About the Role

The IT Intern is the hands-on first line of internal IT support at CSBR, keeping every employee's equipment, accounts, and access working from their first day to their last. Reporting to the AVP, Platform Engineering IT, the Intern handles day-to-day help-desk requests, from laptop, monitor, and peripheral swaps to troubleshooting, maintains the company's hardware and software asset catalog, and executes access issuance and removal for joiners, movers, and leavers. As the role matures, the Intern takes on light development and identity administration in Microsoft Entra ID, Active Directory, and the company's identity provider (IdP), automating repetitive work with scripts. The role works closely with HR, Finance, Operations, Information Security, and the platform engineering team, and is designed as a learning track inside the technology team of a regulated financial institution.

Help Desk & End-User Support

• Act as the first point of contact for internal IT requests: log and triage tickets, troubleshoot hardware, Windows and macOS, Microsoft 365, Wi-Fi, VPN, printers, and meeting-room equipment, and escalate to the platform team with a clear record when needed.
• Prepare, deliver, swap, and collect laptops, monitors, docking stations, keyboards, mice, and headsets – including device enrollment and setup, data backup, and secure wipe before reuse or disposal.
• Run the IT side of onboarding and offboarding, so that new joiners leave their first day with working equipment, accounts, and MFA, and leavers return every asset.
• Turn recurring issues into short how-to articles and FAQ entries that colleagues can follow on their own.

Asset Catalog & Inventory

• Maintain the hardware and software asset catalog: assigned user, serial number, purchase invoice, warranty, condition, location, and lifecycle status from purchase to disposal.
• Run periodic physical inventories and reconcile them against the catalog and Finance's fixed-asset records, flagging missing, damaged, or end-of-life equipment.
• Track software licenses and SaaS seats, reclaim unused seats, and support renewals, purchases, repairs, and warranty claims with vendors.

Access & Identity Administration

• Execute joiner, mover, and leaver requests: create and disable accounts, assign groups and licenses, and grant and revoke access to applications and shared drives, strictly following approval rules and least privilege.
• Administer users, groups, and devices in Microsoft Entra ID and Active Directory, including MFA enrollment and resets, and support the onboarding of new applications to single sign-on through the company's IdP, under the supervision of the platform team.
• Keep an auditable record of every access grant and removal, and support periodic access reviews and evidence requests from internal controls, auditors, and regulators.

Automation & Light Development

• Automate repetitive tasks with PowerShell, Python, and the Microsoft Graph API – e.g., bulk user provisioning, license and access reports, inventory reconciliation, and offboarding checklists.
• Contribute small scripts and internal tools to the Technology team's GitHub repositories, following code review, CI, and secrets-handling practices, and using AI coding assistants with review.

Security Hygiene

• Check that every device meets the security baseline – disk encryption, OS and software updates, endpoint protection, and screen lock – before it is handed to a user.
• Report lost or stolen devices, suspected phishing, and other security events to Information Security, and help handle them following the incident procedure.

Special Projects

• Support office moves, meeting-room and network setup, and equipment rollouts.

Support other initiatives as prioritized by the AVP, Platform Engineering IT.

Requirements

• Currently enrolled in an undergraduate or technologist program in Computer Science, Information Systems, Systems Analysis and Development, Computer Engineering, Computer Networks, or a related field, with at least 12 months remaining until graduation.
• Availability for up to 30 hours per week (6 hours per day), on-site at the São Paulo office.
• Native Portuguese and advanced English, equivalent to CEFR C1 or above – able to work day to day in English with documentation, vendors, and colleagues across the Credit Saison group.
• Basic knowledge of Windows and macOS, computer hardware and peripherals, and networking fundamentals (DNS, DHCP, Wi-Fi, VPN).
• Familiarity with Microsoft 365. Exposure to Entra ID or Active Directory (users, groups, MFA) preferred.
• Introductory scripting in PowerShell, Python, or Bash. Git basics desirable.
• Organized and detail-oriented, with comfort in spreadsheets and the discipline to keep records accurate and current.
• Clear, patient, and courteous communication with non-technical colleagues, and a service mindset.
• Discretion with confidential information, credentials, and personal data, in line with LGPD.
• Desirable: entry-level certifications such as CompTIA A+, Microsoft MS-900, SC-900, or AZ-900; experience with a ticketing tool or a device-management (MDM) platform such as Intune or Jamf.