Summary The Cloud Security team is seeking an experienced IAM Engineer to manage and enhance identity and access management platforms across a multi-cloud environment, including AWS, Azure, GCP, and OCI. This night shift role supports real-time coverage during US business hours and involves working within a global IAM operations team. Job Responsibilities
• Identity & Access Management:
• Operate and maintain enterprise identity services across authentication, federation, access management, lifecycle, and governance.
• Provision, modify, and revoke user and service account access across AWS, Azure, GCP, and OCI.
• Create and manage IAM roles, policies, permission sets, service principals, managed identities, and service accounts.
• Implement and enforce role-based access control (RBAC).
• Implement and support SSO, MFA, conditional access, federation, OAuth, OpenID Connect, SAML, SCIM, and directory integrations.
• Conduct periodic access reviews and access certifications to enforce least-privilege.
• Manage federated access and single sign-on (SSO) integrations across cloud providers and enterprise applications.
• Cloud Account Lifecycle & Onboarding:
• Onboard new cloud accounts, subscriptions, and projects — configuring IAM controls, security baselines, and team access.
• Manage the full lifecycle of cloud accounts from creation through decommissioning.
• Create reusable standards, patterns, automation, and runbooks for identity integrations and operations.
• Coordinate with infrastructure, networking, platform, and product teams during onboarding.
• Security, Compliance & Governance:
• Investigate overly permissive roles, unused credentials, and inactive service accounts.




• Assess identity platforms and access patterns to reduce risk and support audit and compliance needs.
• Support compliance audits — prepare evidence, validate access controls, enforce policy.
• Assist in remediation efforts and incident response as needed — collaborating with operations and engineering teams to resolve access-related issues.
• Enforce IAM policies, naming conventions, and tagging standards across cloud environments.
• Automation & Operational Excellence:
• Assist in IAM automation efforts as needed — contributing to scripts, tools, and process improvements.
• Improve identity service reliability through incident response and security hardening.
• Contribute to the identity roadmap by recommending improvements to security, usability, and operational efficiency.
• Document procedures, runbooks, and knowledge base articles for IAM operations.
• Process access requests and change requests via ticketing systems, ensuring SLAs and security standards are met.
• Participate in weekend on-call rotation (8-hour shifts).
• Perform structured shift handoffs with the day team to ensure continuity across time zones. Required Skills
• Strong hands-on experience with cloud IAM across at least two of: AWS, Azure, GCP.




• Demonstrable experience operating and maintaining IAM capabilities across enterprise environments, including public cloud and on-premises systems.
• Deep understanding of identity and authentication protocols such as SAML, OAuth, OpenID Connect, LDAP, Kerberos, and SCIM.
• Experience with enterprise identity platforms such as Okta, Microsoft Entra ID, Ping, SailPoint, Saviynt, CyberArk, or similar technologies.
• Working knowledge of MFA, conditional access, privileged access, identity lifecycle processes, access reviews, and least-privilege access models.
• Solid knowledge of security standards, control frameworks, risk management practices, and identity security best practices.
• Exceptional problem-solving and analytical skills with the ability to troubleshoot complex technical issues across distributed systems.
• Excellent communication and collaboration abilities — working effectively with technical teams, business stakeholders, and application owners across time zones.
• Proven ability to work independently, prioritize effectively, and manage multiple engineering initiatives simultaneously. Education & Qualifications
• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field, or equivalent experience.
• A minimum of 5 years of experience engineering identity and access management solutions across authentication, federation, access control, lifecycle management, access governance, or related identity domains.
• Preferred: Experience with automation of IAM processes, proficiency in scripting languages, OCI experience, relevant certifications, and experience with privileged access management. #AditiConsulting # 26-06793

📌 Security Engineer (Bengaluru)
🏢 Aditi Consulting
📍 Bengaluru