Cloud IAM Engineer

Responsibilities

• Collaborate with cross‑functional cloud teams—including security, infrastructure, service engineering, and business application teams—to define and implement IAM roles and policies required to build, support, and consume services in public cloud.
• Define and develop security controls and tools to ensure IAM implementations in public cloud environments comply with cloud security standards and policies.
• Build automation and libraries to enable developers to create IAM identities and permissions through self‑service. Deliver IAM solutions through CI/CD pipelines with automated testing and validation.
• Build and enhance Python‑based frameworks used for:
• Security control orchestration
• Detection and response workflows
• Develop integrations with:
• Cloud services (APIs, services, identity layers)
• Security tooling and platforms
• Contribute to:
• Preventative controls (policy enforcement, OPA/Rego)
• Detective controls (event‑driven detection logic)
• Write and maintain:
• Automated unit tests
• Integration and behavioral tests
• Support CI/CD integration and continuous validation of controls.
• Collaborate with:
• Security Controls Engineers
• Threat Modelers
• Cloud Architects

This is not a traditional security or IAM role. It is a development‑heavy engineering role requiring strong coding expertise. Candidates must have proven Python development experience.

• Minimum of 3 years of hands‑on experience working with cloud‑native services in AWS or GCP.
• Advanced proficiency in Python (non‑negotiable).
• Experience with:
• API development and integrations
• Writing scalable, production‑grade code
• Automated testing framework
• Experience in the design and implementation of enterprise security solutions in financial services or a large, complex, and/or global environment.
• Highly motivated self‑starter with excellent interpersonal and communication skills.
• Ability to work independently, multi‑task, and take ownership of various parts of a project or initiative.
• Relevant certifications such as CISSP, AWS Certified Security Specialty, Google Professional Cloud Security Engineer are desirable.
• MUST pass a Karat Assessment – Python focused.
• Bachelor of Computer Science.

• Experience with infrastructure as code (IaC) tools:
  Terraform and Cloud Formation.
• Proficiency in Python, Go, or Java.
• Proficiency in unit testing frameworks such as Behave, pytest, or JUnit.
• Proficiency in developing and securing SOAP and REST based web service APIs.
• Experience in Dev Ops and agile methodologies and automated solution delivery and testing through CI/CD pipelines.

Salary Range: $90,000 to $115,000 per year