IAM Engineer with AWS,GCP,Azure

We have an urgent requirement for a Senior IAM Engineer to operate, maintain and improve enterprise identity and access management platforms across a large-scale multi-cloud environment (AWS, Azure, GCP, OCI). This is a night shift position supporting US business hours.

*Location:* Bangalore - Work From Office

Shift: Night Shift - 10:00 PM to 7:00 AM IST (US Hours) + Weekend On-call rotation

Experience: 5+ Years

Responsibilities:

- Operate and maintain enterprise identity services for authentication, federation, access management & lifecycle governance

- Provision, modify, and revoke user and service account access across AWS, Azure, GCP, OCI

- Create and manage IAM roles, policies, permission sets, service principals, managed identities, service accounts

- Implement and enforce RBAC, least-privilege, SSO, MFA, Conditional Access, Federation, OAuth, OIDC, SAML, SCIM

- Onboard new cloud accounts / subscriptions / projects - configuring IAM controls, security baselines, team access

- Manage full lifecycle of cloud accounts from creation to decommissioning

- Conduct periodic access reviews, access certifications, and investigate overly permissive roles / unused credentials

- Support compliance audits, prepare evidence, enforce IAM policies, naming conventions, tagging standards

- Assist in IAM automation, create runbooks, reusable standards, and knowledge base articles

- Process access requests via Jira / ServiceNow ensuring SLAs and security standards

*Mandatory Skills:*

- AWS IAM: IAM users/groups/roles/policies, SCPs & Organizations, IAM Identity Center / SSO, Cross-account access, CloudTrail, Access Analyzer

- Azure IAM: Entra ID / Azure AD, RBAC (Built-in & Custom), Service Principals, Managed Identities, App Registrations, PIM, Conditional Access, Management Groups, Key Vault

- GCP IAM:Roles (basic/predefined/custom), Service Accounts, Workload Identity Federation, Organization Policies, GKE IAM, Policy Analyzer

- Protocols: SAML 2.0, OAuth 2.0, OIDC, SCIM, LDAP, Kerberos

- Platforms: Okta, Microsoft Entra ID, Ping, SailPoint, Saviynt, CyberArk or similar

Good to have:

- OCI - Compartments, policies, dynamic groups, vault & key management

- Scripting - Python, Bash, PowerShell

- IaC - Terraform, CloudFormation, Bicep

- PAM, KMS, CI/CD Pipeline Security, DevOps

Interested candidates can apply, OR refer a candidate and earn rewards up to 50,000 INR if they get hired.

Thanks & Regards

IITJobs Inc

Register for global opportunities at iitjobs.com

Download our app on Apple App Store or Google Play Store!

World's #1 IT Specific Global Technology Job Portal

Refer a candidate & earn up to 50,000