Senior IAM Engineer — Cloud Securit...

Role Overview

We are seeking a Senior IAM Engineer for our Security Consulting Firm client to operate, maintain, and enhance enterprise identity platforms across a multi-cloud footprint (AWS, Azure, GCP, OCI).

Key Responsibilities:

• Identity Lifecycle Management: Provision, modify, and revoke access for users/service accounts; enforce RBAC/ABAC and least-privilege principles.
• Federation & Authentication: Administer enterprise SSO, MFA, Conditional Access, and protocols (SAML 2.0, OIDC, OAuth 2.0, SCIM) across IdPs.
• Cloud Account Onboarding: Implement IAM security baselines for new cloud accounts.
• Security & Governance: Triage CSPM alerts, remediate over-privileged identities, enforce tagging standards, and support compliance audits.
• Operations & Support: Manage tickets (Jira/ServiceNow), conduct shift handoffs, and participate in weekend on-call rotations during US business hours.

Requirements:

• Experience: 4–5 years in IAM engineering, access governance, and enterprise identity operations.
• Cloud Infrastructure: Hands-on experience with at least two major platforms (AWS, Azure, or GCP).
• Protocols & Tools: Expertise in SAML, OIDC, OAuth, SCIM; familiarity with Okta, Microsoft Entra ID, Ping Identity, CyberArk, or SailPoint.
• Education: Bachelor's degree in CS/IT/Cybersecurity or equivalent experience.

Preferred Qualifications:

• Scripting (Python, Bash, PowerShell) and IaC (Terraform).
• CSPM tools (Wiz, Prisma Cloud), PAM solutions, or OCI experience.
• Active certifications: AWS Certified Security, AZ-500, GCP Cloud Security Engineer, Okta Certified, CISSP, CCSP.