Senior Security Engineer, Identity and Access Management

What you'll do

• Build and evolve Identity Governance and Administration (IGA) capabilities for cloud-native environments.
• Implement and operate Privileged Access Management (PAM) specifically within AWS infrastructure.
• Design and architect a Certificate Lifecycle Management solution for cloud-native workloads.
• Integrate IAM across AWS services, SaaS platforms, and developer/DevOps pipelines.
• Design identity and access controls to secure AI/ML systems, training data, and inference APIs.
• Automate provisioning, de-provisioning, and access reviews using infrastructure-as-code and AI tools.
• Enforce least privilege and zero-trust principles through automated policy management.
• Serve as a technical lead and mentor for IAM-related projects and junior engineers.

What we're looking for

• Minimum 8 years experience with a Bachelor’s degree, or 5 years with a Master’s, or a PhD with 3 years' experience.
• Strong experience with IAM tools such as Okta, CyberArk, Ping, and SailPoint.
• Deep knowledge of cloud-native environments, specifically AWS IAM roles, policies, permissions boundaries, and federation.
• Proficiency in infrastructure-as-code tools like Terraform or CloudFormation.
• Familiarity with authentication and authorization protocols including SAML, OAuth2, OpenID Connect, and Kerberos.
• Hands-on scripting skills in Python or PowerShell to automate IAM operations.
• Solid understanding of compliance standards such as NIST, SOC 2, and PCI DSS.
• Relevant certifications like CISSP, CISM, or IAM-specific credentials (preferred).