Summary The Cloud Security team is seeking an experienced IAM Engineer to manage and enhance identity and access management platforms across a multi-cloud environment, including AWS, Azure, GCP, and OCI. This night shift role supports real-time coverage during US business hours and involves working within a global IAM operations team.

Job Responsibilities

- Identity &
- Access Management:

- Operate and maintain enterprise identity services across authentication, federation, access management, lifecycle, and governance.
- Provision, modify, and revoke user and service account access across AWS, Azure, GCP, and OCI.
- Create and manage IAM roles, policies, permission sets, service principals, managed identities, and service accounts.
- Implement and enforce role-based access control (RBAC).
- Implement and support SSO, MFA, conditional access, federation, OAuth, OpenID Connect, SAML, SCIM, and directory integrations.
- Conduct periodic access reviews and access certifications to enforce least-privilege.
- Manage federated access and single sign-on (SSO) integrations across cloud providers and enterprise applications.

- Cloud Account Lifecycle &
- Onboarding:

- Onboard new cloud accounts, subscriptions, and projects -- configuring IAM controls, security baselines, and team access.
- Manage the full lifecycle of cloud accounts from creation through decommissioning.
- Create reusable standards, patterns, automation, and runbooks for identity integrations and operations.
- Coordinate with infrastructure, networking, platform, and product teams during onboarding.

- Security, Compliance &
- Governance:

- Investigate overly permissive roles, unused credentials, and inactive service accounts.




- Assess identity platforms and access patterns to reduce risk and support audit and compliance needs.
- Support compliance audits -- prepare evidence, validate access controls, enforce policy.
- Assist in remediation efforts and incident response as needed -- collaborating with operations and engineering teams to resolve access-related issues.
- Enforce IAM policies, naming conventions, and tagging standards across cloud environments.

- Automation &
- Operational Excellence:

- Assist in IAM automation efforts as needed -- contributing to scripts, tools, and process improvements.
- Improve identity service reliability through incident response and security hardening.
- Contribute to the identity roadmap by recommending improvements to security, usability, and operational efficiency.
- Document procedures, runbooks, and knowledge base articles for IAM operations.
- Process access requests and change requests via ticketing systems, ensuring SLAs and security standards are met.
- Participate in weekend on-call rotation (8-hour shifts).
- Perform structured shift handoffs with the day team to ensure continuity across time zones.

Required Skills

- Strong hands-on experience with cloud IAM across at least two of: AWS, Azure, GCP.




- Demonstrable experience operating and maintaining IAM capabilities across enterprise environments, including public cloud and on-premises systems.
- Deep understanding of identity and authentication protocols such as SAML, OAuth, OpenID Connect, LDAP, Kerberos, and SCIM.
- Experience with enterprise identity platforms such as Okta, Microsoft Entra ID, Ping, SailPoint, Saviynt, CyberArk, or similar technologies.
- Working knowledge of MFA, conditional access, privileged access, identity lifecycle processes, access reviews, and least-privilege access models.
- Robust knowledge of security standards, control frameworks, risk management practices, and identity security best practices.
- Exceptional problem-solving and analytical skills with the ability to troubleshoot complex technical issues across distributed systems.
- Excellent communication and collaboration abilities -- working effectively with technical teams, business stakeholders, and application owners across time zones.
- Proven ability to work independently, prioritize effectively, and manage multiple engineering initiatives simultaneously.

Education &

- Qualifications
- Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field, or equivalent experience.
- A minimum of 5 years of experience engineering identity and access management solutions across authentication, federation, access control, lifecycle management, access governance, or related identity domains.
- Preferred: Experience with automation of IAM processes, proficiency in scripting languages, OCI experience, relevant certifications, and experience with privileged access management.

#AditiConsulting

# 26-06793

📌 Security Engineer (Bengaluru)
🏢 Aditi Consulting
📍 Bengaluru