Security Engineer

Summary
The Cloud Security team is seeking an experienced IAM Engineer to manage and enhance identity and access management platforms across a multi-cloud environment, including AWS, Azure, GCP, and OCI. This night shift role supports real-time coverage during US business hours and involves working within a global IAM operations team.

Job Responsibilities

• Identity & Access Management:
  • Operate and maintain enterprise identity services across authentication, federation, access management, lifecycle, and governance.
  • Provision, modify, and revoke user and service account access across AWS, Azure, GCP, and OCI.
  • Create and manage IAM roles, policies, permission sets, service principals, managed identities, and service accounts.
  • Implement and enforce role-based access control (RBAC).
  • Implement and support SSO, MFA, conditional access, federation, OAuth, OpenID Connect, SAML, SCIM, and directory integrations.
  • Conduct periodic access reviews and access certifications to enforce least-privilege.
  • Manage federated access and single sign-on (SSO) integrations across cloud providers and enterprise applications.
• Cloud Account Lifecycle & Onboarding:
  • Onboard new cloud accounts, subscriptions, and projects — configuring IAM controls, security baselines, and team access.
  • Manage the full lifecycle of cloud accounts from creation through decommissioning.
  • Create reusable standards, patterns, automation, and runbooks for identity integrations and operations.
  • Coordinate with infrastructure, networking, platform, and product teams during onboarding.
• Security, Compliance & Governance:
  • Investigate overly permissive roles, unused credentials, and inactive service accounts.
  • Assess identity platforms and access patterns to reduce risk and support audit and compliance needs.
  • Support compliance audits — prepare evidence, validate access controls, enforce policy.
  • Assist in remediation efforts and incident response as needed — collaborating with operations and engineering teams to resolve access-related issues.
  • Enforce IAM policies, naming conventions, and tagging standards across cloud environments.
• Automation & Operational Excellence:
  • Assist in IAM automation efforts as needed — contributing to scripts, tools, and process improvements.
  • Improve identity service reliability through incident response and security hardening.
  • Contribute to the identity roadmap by recommending improvements to security, usability, and operational efficiency.
  • Document procedures, runbooks, and knowledge base articles for IAM operations.
  • Process access requests and change requests via ticketing systems, ensuring SLAs and security standards are met.
  • Participate in weekend on-call rotation (8-hour shifts).
  • Perform structured shift handoffs with the day team to ensure continuity across time zones.

• Strong hands-on experience with cloud IAM across at least two of: AWS, Azure, GCP.
• Demonstrable experience operating and maintaining IAM capabilities across enterprise environments, including public cloud and on-premises systems.
• Deep understanding of identity and authentication protocols such as SAML, OAuth, OpenID Connect, LDAP, Kerberos, and SCIM.
• Experience with enterprise identity platforms such as Okta, Microsoft Entra ID, Ping, SailPoint, Saviynt, CyberArk, or similar technologies.
• Working knowledge of MFA, conditional access, privileged access, identity lifecycle processes, access reviews, and least-privilege access models.
• Strong knowledge of security standards, control frameworks, risk management practices, and identity security best practices.
• Exceptional problem-solving and analytical skills with the ability to troubleshoot complex technical issues across distributed systems.
• Excellent communication and collaboration abilities — working effectively with technical teams, business stakeholders, and application owners across time zones.
• Proven ability to work independently, prioritize effectively, and manage multiple engineering initiatives simultaneously.

• Bachelor&rsquos degree in Computer Science, Information Technology, Cybersecurity, or a related field, or equivalent experience.
• A minimum of 5 years of experience engineering identity and access management solutions across authentication, federation, access control, lifecycle management, access governance, or related identity domains.
• Preferred: Experience with automation of IAM processes, proficiency in scripting languages, OCI experience, relevant certifications, and experience with privileged access management.

#AditiConsulting
# 26-06793