Cloud IAM Engineer

Responsibilities

• Collaborate with cross-functional cloud teams including security, infrastructure, service engineering and business application teams to define and implement IAM roles and policies required to build, support and consume services in public cloud.
• Define and develop security controls and tools to ensure IAM implementation in public cloud environments are compliant with cloud security standards and policies.
• Build automation and libraries to enable developers to create IAM identities and permissions through self-service.
• Deliver IAM solutions through CI/CD pipelines with automated testing and validation.
• Build and enhance Python-based frameworks used for:
  • Security control orchestration
  • Detection and response workflows
• Develop integrations with:
  • Cloud services (APIs, services, identity layers)
  • Security tooling and platforms
• Contribute to:
  • Preventative controls (policy enforcement, OPA/Rego)
  • Detective controls (event-driven detection logic)
• Write and maintain:
  • Automated unit tests
  • Integration and behavioral tests
• Support CI/CD integration and continuous validation of controls
• Collaborate with:
  • Security Controls Engineers
  • Threat Modelers
  • Cloud Architects

Qualifications

• This is not a traditional security or IAM role. It is a development-heavy engineering role requiring strong coding expertise.
• Candidates must have proven Python development experience.
• Minimum of 3 years of hands-on experience working with cloud-native services in AWS or GCP.
• Advanced proficiency in Python (non-negotiable).
• Experience with:
  • API development and integrations
  • Writing scalable, production-grade code
  • Automated testing framework
• Experience in the design and implementation of enterprise security solutions in Financial Services or a large complex and/or global environment.
• Highly motivated self-starter with excellent interpersonal and communication skills.
• Ability to work independently, multi-task, and take ownership of various parts of a project or initiative.
• Relevant certifications such as CISSP, AWS Certified Security Specialty, Google Professional Cloud Security Engineer are desirable.
• MUST pass a Karat Assessment – Python focused

Qualifications:

• BACHELOR OF COMPUTER SCIENCE

Pay

Salary Range: $100,000 to $130,000 per year