Cloud IAM Engineer

Title: Cloud IAM Engineer 
Location: Irving, TX/Onsite
Duration: Full Time
Visa: GC, EAD
Experience required: 4 - 6 years of experience

Job Description

Responsibilities:

•  Collaborate with cross-functional cloud teams including security, infrastructure, service engineering and business application teams to define and implement IAM roles and policies required to build, support and consume services in public cloud.   

•              Define and develop security controls and tools to ensure IAM implementation in public cloud environments are compliant with cloud security standards and policies.

•              Build automation and libraries to enable developers to create IAM identities and permissions through self-service. Deliver IAM solutions through CI/CD pipelines with automated testing and validation.

•              Build and enhance Python-based frameworks used for:

o             Security control orchestration

o             Detection and response workflows

•              Develop integrations with:

o             Cloud services (APIs, services, identity layers)

o             Security tooling and platforms

•              Contribute to:

o             Preventative controls (policy enforcement, OPA/Rego)

o             Detective controls (event-driven detection logic)

•              Write and maintain:

o             Automated unit tests

o             Integration and behavioral tests

•              Support CI/CD integration and continuous validation of controls

•              Collaborate with:

o             Security Controls Engineers

o             Threat Modelers

o             Cloud Architects

Qualifications:

This is not a traditional security or IAM role. It is a development-heavy engineering role requiring strong coding expertise. Candidates must have proven Python development experience.

•              Minimum of 3 years of hands-on experience working with cloud-native services in AWS or Google Cloud Platform.

•              Advanced proficiency in Python (non-negotiable)

•              Experience with:

o             API development and integrations

o             Writing scalable, production-grade code

•              Automated testing framework

•              Experience in the design and implementation of enterprise security solutions in Financial Services or a large complex and/or global environment

•              Highly motivated self-starter with excellent interpersonal and communication skills

•              Ability to work independently, multi-task, and take ownership of various parts of a project or initiative.

•              Relevant certifications such as CISSP, AWS Certified Security Specialty, Google Professional Cloud Security Engineer are desirable

•              MUST pass a Karat Assessment – Python focused

Critical Competencies:

•              Experience with infrastructure as code (IaC) tools: Terraform and CloudFormation

•              Proficiency in Python, Go or Java

•              Proficiency in unit testing frameworks such as Behave, pytest or Junit

•              Proficiency in developing and securing SOAP and REST based web service APIs

•              Experience in DevOps and agile methodologies and automated solution delivery and testing through CI/CD pipelines