Description

Senior IAM Engineer - Multi-Cloud - Bangalore WFO - 5+ Years

We have an urgent requirement for a Senior IAM Engineer to operate, maintain and improve enterprise identity and access management platforms across a large-scale multi-cloud environment (AWS, Azure, GCP, OCI). This is a night shift position supporting US business hours.

*Location:* Bangalore - Work From Office
*Shift:* Night Shift - 10:00 PM to 7:00 AM IST (US Hours) + Weekend On-call rotation
*Experience:* 5+ Years

*Responsibilities:*
- Operate and maintain enterprise identity services for authentication, federation, access management & lifecycle governance
- Provision, modify, and revoke user and service account access across AWS, Azure, GCP, OCI
- Create and manage IAM roles, policies, permission sets, service principals, managed identities, service accounts
- Implement and enforce RBAC, least-privilege, SSO, MFA, Conditional Access, Federation, OAuth, OIDC, SAML, SCIM
- Onboard new cloud accounts / subscriptions / projects - configuring IAM controls, security baselines, team access
- Manage full lifecycle of cloud accounts from creation to decommissioning
- Conduct periodic access reviews, access certifications, and investigate overly permissive roles / unused credentials
- Support compliance audits, prepare evidence, enforce IAM policies, naming conventions, tagging standards
- Assist in IAM automation, create runbooks, reusable standards, and knowledge base articles
- Process access requests via Jira / ServiceNow ensuring SLAs and security standards

*Mandatory Skills:*

- *AWS IAM:* IAM users/groups/roles/policies, SCPs & Organizations, IAM Identity Center / SSO, Cross-account access, CloudTrail, Access Analyzer
- *Azure IAM:* Entra ID / Azure AD, RBAC (Built-in & Custom), Service Principals, Managed Identities, App Registrations, PIM, Conditional Access, Management Groups, Key Vault
- *GCP IAM:* Roles (basic/predefined/custom), Service Accounts, Workload Identity Federation, Organization Policies, GKE IAM, Policy Analyzer
- *Protocols:* SAML 2.0, OAuth 2.0, OIDC, SCIM, LDAP, Kerberos
- *Platforms:* Okta, Microsoft Entra ID, Ping, SailPoint, Saviynt, CyberArk or similar

*Good to have:*
- OCI - Compartments, policies, dynamic groups, vault & key management
- Scripting - Python, Bash, PowerShell
- IaC - Terraform, CloudFormation, Bicep
- PAM, KMS, CI/CD Pipeline Security, DevOps

Interested candidates can apply, OR refer a candidate and earn rewards up to 50,000 INR if they get hired.

Thanks & Regards
IITJobs Inc
Register for global opportunities at iitjobs.com
Download our app on Apple App Store or Google Play Store!
World's #1 IT Specific Global Technology Job Portal
Refer a candidate & earn up to ₹50,000

Key Skills

Education

Not specified