Security Engineer

Summary
The Cloud Security team is looking for an experienced IAM Engineer to oversee and improve identity and access management solutions across a multi-cloud setting, including AWS, Azure, GCP, and OCI. This night shift position delivers real-time coverage during US business hours and will operate within a global IAM operations team.

Job Responsibilities

• Identity & Access Management:
  • Operate and maintain enterprise identity services spanning authentication, federation, access management, lifecycle, and governance.
  • Provision, update, and remove user and service account access across AWS, Azure, GCP, and OCI.
  • Design and administer IAM roles, policies, permission sets, service principals, managed identities, and service accounts.
  • Develop and enforce role-based access control (RBAC).
  • Configure and support SSO, MFA, conditional access, federation, OAuth, OpenID Connect, SAML, SCIM, and directory integrations.
  • Run recurring access reviews and access certifications to uphold least-privilege.
  • Manage federated access and single sign-on (SSO) integrations across cloud providers and enterprise applications.
• Cloud Account Lifecycle & Onboarding:
  • Bring new cloud accounts, subscriptions, and projects online—establishing IAM controls, security baselines, and enabling team access.
  • Own the end-to-end cloud account lifecycle, from initial setup through decommissioning.
  • Create repeatable standards, patterns, automation, and runbooks for identity integrations and day-to-day operations.
  • Partner with infrastructure, networking, platform, and product teams throughout onboarding activities.
• Security, Compliance & Governance:
  • Investigate overly permissive roles, unused credentials, and inactive service accounts.
  • Evaluate identity platforms and access behaviors to reduce risk while supporting audit and compliance requirements.
  • Assist with compliance audits—compile evidence, verify access controls, and enforce policy.
  • Support remediation efforts and incident response when necessary—working with operations and engineering teams to resolve access-related problems.
  • Apply IAM policies, naming conventions, and tagging standards consistently across cloud environments.
• Automation & Operational Excellence:
  • Support IAM automation initiatives as needed—contributing to scripts, tools, and process enhancements.
  • Increase identity service reliability by participating in incident response and security hardening.
  • Influence the identity roadmap by recommending enhancements that improve security, usability, and operational efficiency.
  • Maintain documentation for procedures, runbooks, and IAM operations knowledge base articles.
  • Handle access requests and change requests through ticketing systems, ensuring SLAs and security standards are met.
  • Join the weekend on-call rotation (8-hour shifts).
  • Complete structured handoffs with the day team to maintain operational continuity across time zones.

• Strong hands-on experience with cloud IAM across at least two of: AWS, Azure, GCP.
• Proven experience operating and maintaining IAM capabilities in enterprise environments, including public cloud and on-premises systems.
• Thorough understanding of identity and authentication protocols such as SAML, OAuth, OpenID Connect, LDAP, Kerberos, and SCIM.
• Experience with enterprise identity platforms such as Okta, Microsoft Entra ID, Ping, SailPoint, Saviynt, CyberArk, or similar technologies.
• Practical knowledge of MFA, conditional access, privileged access, identity lifecycle processes, access reviews, and least-privilege access models.
• Strong knowledge of security standards, control frameworks, risk management practices, and identity security best practices.
• Outstanding problem-solving and analytical skills, with the ability to troubleshoot complex technical issues across distributed systems.
• Excellent communication and collaboration skills—able to work effectively with technical teams, business stakeholders, and application owners across time zones.
• Demonstrated capability to work independently, prioritize efficiently, and manage multiple engineering initiatives at the same time.

• Bachelor&rsquos degree in Computer Science, Information Technology, Cybersecurity, or a related field, or equivalent experience.
• At least 5 years of experience engineering identity and access management solutions across authentication, federation, access control, lifecycle management, access governance, or related identity domains.
• Preferred: Experience with automation of IAM processes, scripting language proficiency, OCI experience, relevant certifications, and experience with privileged access management.

#AditiConsulting
# 26-06793