The Cloud Security team is seeking an experienced IAM Engineer to manage and enhance identity and access management platforms across a multi-cloud environment, including AWS, Azure, GCP, and OCI. This night shift role supports real-time coverage during US business hours and involves working within a global IAM operations team.

Provision, modify, and revoke user and service account access across AWS, Azure, GCP, and OCI.
Create and manage IAM roles, policies, permission sets, service principals, managed identities, and service accounts.
Manage federated access and single sign-on (SSO) integrations across cloud providers and enterprise applications.

Cloud Account Lifecycle & Onboarding:
Onboard recent cloud accounts, subscriptions, and projects — configuring IAM controls, security baselines, and team access.
Manage the full lifecycle of cloud accounts from creation through decommissioning.
Create reusable standards, patterns, automation, and runbooks for identity integrations and operations.
Coordinate with infrastructure, networking, platform, and product teams during onboarding.

Security, Compliance & Governance:
Investigate overly permissive roles, unused credentials, and inactive service accounts.
Assess identity platforms and access patterns to reduce risk and support audit and compliance needs.
Support compliance audits — prepare evidence, validate access controls, enforce policy.
Assist in remediation efforts and incident response as needed — collaborating with operations and engineering teams to resolve access-related issues.
Enforce IAM policies, naming conventions,



and tagging standards across cloud environments.

Improve identity service reliability through incident response and security hardening.
Contribute to the identity roadmap by recommending improvements to security, usability, and operational efficiency.
Document procedures, runbooks, and knowledge base articles for IAM operations.
Process access requests and change requests via ticketing systems, ensuring SLAs and security standards are met.
Participate in weekend on-call rotation (8-hour shifts).
Perform structured shift handoffs with the day team to ensure continuity across time zones.

Strong hands-on experience with cloud IAM across at least two of: AWS, Azure, GCP.
Demonstrable experience operating and maintaining IAM capabilities across enterprise environments, including public cloud and on-premises systems.
Experience with enterprise identity platforms such as Okta, Microsoft Entra ID, Ping, SailPoint, Saviynt, CyberArk, or similar technologies.
Strong knowledge of security standards, control frameworks, risk management practices, and identity security best practices.
Bachelor&rsquos; degree in Computer Science, Information Technology, Cybersecurity, or a related field, or equivalent experience.
A minimum of 5 years of experience engineering identity and access management solutions across authentication, federation, access control, lifecycle management, access governance, or related identity domains.
Experience with automation of IAM processes, proficiency in scripting languages, OCI experience, relevant certifications, and experience with privileged access management.

#

📌 AWS Security Engineer (Bengaluru)
🏢 Aditi Tech Consulting Private
📍 Bengaluru