IAM Engineer with AWS,GCP,Azure

iitjobs, Inc.; Bengaluru; On-site; INR 900,000 - 1,300,000; Full time

Job summary

iitjobs, Inc. is seeking a Senior IAM Engineer to operate, maintain and improve identity and access management across AWS, Azure, GCP and OCI in a large multi-cloud environment.

The role is based in Bengaluru (Bangalore) with a night shift (US hours) and weekend on-call rotations. You will configure IAM controls, perform access reviews, and support continuous security improvements.

Qualifications

• Minimum 5+ years of experience in IAM for large-scale cloud environments.
• Hands-on experience with AWS IAM, GCP IAM, SSO, MFA, OAuth, OIDC, SAML and SCIM.
• Familiar with cross-account access, roles, policies and access reviews.

Responsibilities

• Operate and maintain enterprise IAM services across multi-clouds (AWS, Azure, GCP, OCI).
• Provision, modify, and revoke user and service account access.
• Create and manage IAM roles, policies, permission sets, and service principals.

Skills

IAM concepts

RBAC & least privilege

SSO & MFA

Tools

AWS IAM

GCP IAM

Okta

Microsoft Entra ID

Ping

SailPoint

Saviynt

CyberArk

Job description

We have an urgent requirement for a Senior IAM Engineer to operate, maintain and improve enterprise identity and access management platforms across a large-scale multi-cloud environment (AWS, Azure, GCP, OCI). This is a night shift position supporting US business hours.

*Location:* Bangalore - Work From Office

Shift: Night Shift - 10:00 PM to 7:00 AM IST (US Hours) + Weekend On-call rotation

Experience: 5+ Years

Responsibilities:

• Operate and maintain enterprise identity services for authentication, federation, access management & lifecycle governance
• Provision, modify, and revoke user and service account access across AWS, Azure, GCP, OCI
• Create and manage IAM roles, policies, permission sets, service principals, managed identities, service accounts
• Implement and enforce RBAC, least-privilege, SSO, MFA, Conditional Access, Federation, OAuth, OIDC, SAML, SCIM
• Onboard new cloud accounts / subscriptions / projects - configuring IAM controls, security baselines, team access
• Manage full lifecycle of cloud accounts from creation to decommissioning
• Conduct periodic access reviews, access certifications, and investigate overly permissive roles / unused credentials
• Assist in IAM automation, create runbooks, reusable standards, and knowledge base articles
• Process access requests via Jira / ServiceNow ensuring SLAs and security standards

Mandatory Skills:

• AWS IAM: IAM users/groups/roles/policies, SCPs & Organizations, IAM Identity Center / SSO, Cross-account access, CloudTrail, Access Analyzer
• GCP IAM:Roles (basic/predefined/custom), Service Accounts, Workload Identity Federation, Organization Policies, GKE IAM, Policy Analyzer
• Platforms: Okta, Microsoft Entra ID, Ping, SailPoint, Saviynt, CyberArk or similar

Good to have:

• OCI - Compartments, policies, dynamic groups, vault & key management
• Scripting - Python, Bash, PowerShell
• IaC - Terraform, CloudFormation, Bicep