Cloud IAM Engineer

• Collaborate with cross-functional cloud teams including security, infrastructure, service engineering, and business application teams to define and implement IAM roles and policies required to build, support, and consume services in public cloud.

• Define and develop security controls and tools to ensure IAM implementation in public cloud environments is compliant with cloud security standards and policies.

• Build automation and libraries to enable developers to create IAM identities and permissions through self-service. Deliver IAM solutions through CI/CD pipelines with automated testing and validation.

• Build and enhance Python-based frameworks used for:

• Security control orchestration
• Detection and response workflows

• Develop integrations with:

• Cloud services (APIs, services, identity layers)
• Security tooling and platforms

• Contribute to:

• Preventative controls (policy enforcement, OPA/Rego)
• Detective controls (event-driven detection logic)

• Write and maintain:

• Automated unit tests
• Integration and behavioral tests

• Support CI/CD integration and continuous validation of controls.

• Collaborate with:

• Security Controls Engineers
• Threat Modelers
• Cloud Architects

Qualifications:

This is not a traditional security or IAM role. It is a development-heavy engineering role requiring strong coding expertise. Candidates must have proven Python development experience.

• Minimum of 3 years of hands-on experience working with cloud-native services in AWS or Google Cloud Platform.

• Advanced proficiency in Python (non-negotiable).

• Experience with:

• API development and integrations
• Writing scalable, production-grade code

• Experience with automated testing frameworks.

• Experience in the design and implementation of enterprise security solutions in Financial Services or a large, complex, and/or global environment.

• Highly motivated self-starter with excellent interpersonal and communication skills.

• Ability to work independently, multi-task, and take ownership of various parts of a project or initiative.

• Relevant certifications such as CISSP, AWS Certified Security Specialty, or Google Professional Cloud Security Engineer are desirable.

• MUST pass a Karat Assessment – Python focused.

Critical Competencies:

• Experience with Infrastructure as Code (IaC) tools: Terraform and CloudFormation.

• Proficiency in Python, Go, or Java.

• Proficiency in unit testing frameworks such as Behave, pytest, or JUnit.

• Proficiency in developing and securing SOAP and REST-based web service APIs.

• Experience in DevOps and Agile methodologies and automated solution delivery and testing through CI/CD pipelines.