Cloud Identity Engineer - BACJP

Job Description

Insight Global is seeking a Cloud Identity Engineer for a leading enterprise client. This individual will play a critical role in designing, implementing, and maintaining secure identity solutions across multi-cloud environments (AWS, Azure, and GCP). The engineer will lead identity lifecycle initiatives, develop scalable IAM architectures, and partner closely with security and infrastructure teams to ensure robust access controls and compliance.

This is a highly technical role ideal for a candidate with deep cloud identity expertise, strong development skills, and the ability to operate as a subject matter expert in a complex, enterprise-scale environment.

• Design, build, and maintain cloud identity systems across AWS, Azure, and GCP
• Lead efforts around identity lifecycle management (provisioning, governance, root account analysis)
• Develop architectural diagrams and solutions for complex identity and access needs
• Implement secure IAM frameworks and policies across multi-cloud environments
• Partner with security teams to address emerging threats and vulnerabilities
• Develop and deploy Terraform-based infrastructure solutions
• Build and maintain CI/CD pipelines for identity and access solutions
• Support and optimize authentication systems including SSO, MFA, and federation
• Ensure adherence to identity security best practices and compliance requirements
• Act as SME to guide teams, troubleshoot issues, and drive technical solutions

• 7+ years of cloud engineering and architecture experience
• Deep expertise across AWS, Azure, and GCP identity services
• Strong experience designing and implementing enterprise-scale cloud identity and security solutions
• Hands‑on experience with Terraform (Infrastructure as Code)
• Strong understanding of Identity & Access Management (IAM) concepts and best practices
• Experience with REST APIs, Web API development, SQL, CI/CD pipelines, and testing frameworks
• Advanced programming/scripting experience (.NET, Python, Java, Power Shell, or similar)
• Deep knowledge of authentication technologies (Kerberos, NTLM, MFA, SSO, Federation)
• Experience with LDAP queries and directory services
• Strong understanding of PKI, Certificate Authorities, and encryption/key management
• Ability to act as a Subject Matter Expert (SME) across large-scale environments
• Excellent communication and cross‑functional collaboration skills

• Industry certifications such as Azure Security Engineer (AZ-500)
• AWS Certified Security Specialty
• GCP Professional Cloud Security Engineer
• Experience with security event/incident management systems
• Familiarity with cloud‑native monitoring and identity governance tools
• Experience with enterprise identity lifecycle management

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances.