Our Security team is looking for a hands-on Cloud Security Specialist with a strong focus on Identity & Access Management (IAM) to help drive our security posture across cloud environments. In this role, youll be the go-to expert for IAM governance and cloud identity controls across AWS and GCP- enabling secure access at scale, while working closely with security, DevOps, and engineering teams to solve complex security problems.
The ideal candidate is highly motivated, demonstrates a can do' attitude and needs to have a combination of technical and communication skills, as well as the ability to handle a mix of multiple tasks including projects and technical work.
What you'll do:
Build and maintain secure role, permissions, and account structures aligned with least privilege and zero trust principles.
Manage and govern human and non-human (machine) access to sensitive SaaS applications (e.g., Okta, Git, etc.).
Monitor and improve cloud identity hygiene: users, roles, service accounts, federated access, and third-party integrations.
Automate detection and remediation of IAM misconfigurations and over-privileged identities.
Collaborate with DevOps and engineering to embed IAM best practices into infrastructure pipelines and app deployments.
Support incident response and investigations related to IAM abuse, access misuse, or privilege escalations.
Contribute to detection rules, playbooks, and cloud-specific DFIR processes.
Provide guidance during access reviews, role audits, and trust relationship validation.
Lead the design and enforcement of IAM controls across AWS and GCP.
The ideal candidate is highly motivated, demonstrates a can do' attitude and needs to have a combination of technical and communication skills, as well as the ability to handle a mix of multiple tasks including projects and technical work.
What you'll do:
Build and maintain secure role, permissions, and account structures aligned with least privilege and zero trust principles.
Manage and govern human and non-human (machine) access to sensitive SaaS applications (e.g., Okta, Git, etc.).
Monitor and improve cloud identity hygiene: users, roles, service accounts, federated access, and third-party integrations.
Automate detection and remediation of IAM misconfigurations and over-privileged identities.
Collaborate with DevOps and engineering to embed IAM best practices into infrastructure pipelines and app deployments.
Support incident response and investigations related to IAM abuse, access misuse, or privilege escalations.
Contribute to detection rules, playbooks, and cloud-specific DFIR processes.
Provide guidance during access reviews, role audits, and trust relationship validation.
Lead the design and enforcement of IAM controls across AWS and GCP.
Requirements:
4+ years of experience in security, with at least 23 years focused on cloud IAM, especially in AWS (IAM roles, policies, STS, Organizations, Identity Center, SCPs).
Experience managing IAM in GCP (service accounts, workload identity federation, custom roles).
Solid knowledge of IAM principles: least privilege, zero trust, RBAC/ABAC, identity lifecycle, and access governance.
Familiarity with DFIR in cloud environments: log analysis, alert triage, evidence collection, and investigations.
Hands-on experience with infrastructure-as-code (e.g., Terraform, CloudFormation).
Proficient in scripting (e.g., Python, Bash) for automation and IAM enforcement.
Proven experience collaborating with engineers, SREs, and IT to solve complex identity and access issues.
Excellent English communication skills verbal and written.
Self-starter with strong problem-solving skills and attention to detail.
Bonus Points:
Familiarity with Wiz or similar CSPM/CIEM platforms.
Certified AWS Security Specialty.
Experience in handling or supporting IAM-related incidents (escalations, investigations, remediation).
Experience with cloud-native detection tools (AWS GuardDuty, CloudTrail, GCP SCC, etc.).
4+ years of experience in security, with at least 23 years focused on cloud IAM, especially in AWS (IAM roles, policies, STS, Organizations, Identity Center, SCPs).
Experience managing IAM in GCP (service accounts, workload identity federation, custom roles).
Solid knowledge of IAM principles: least privilege, zero trust, RBAC/ABAC, identity lifecycle, and access governance.
Familiarity with DFIR in cloud environments: log analysis, alert triage, evidence collection, and investigations.
Hands-on experience with infrastructure-as-code (e.g., Terraform, CloudFormation).
Proficient in scripting (e.g., Python, Bash) for automation and IAM enforcement.
Proven experience collaborating with engineers, SREs, and IT to solve complex identity and access issues.
Excellent English communication skills verbal and written.
Self-starter with strong problem-solving skills and attention to detail.
Bonus Points:
Familiarity with Wiz or similar CSPM/CIEM platforms.
Certified AWS Security Specialty.
Experience in handling or supporting IAM-related incidents (escalations, investigations, remediation).
Experience with cloud-native detection tools (AWS GuardDuty, CloudTrail, GCP SCC, etc.).
This position is open to all candidates.
