Senior IAM Engineer — Cloud Security

Uplers Solutions Private Limited.; India; Remote; INR 1,339,000 - 2,009,000; Full time

Job summary

Uplers Solutions Private Limited. is seeking a Senior IAM Engineer to operate, maintain, and enhance enterprise identity platforms across a multi-cloud footprint (AWS, Azure, GCP).

You will provide real-time operational coverage during US business hours, focusing on access management, onboarding, least-privilege enforcement, and identity automation. The role requires 4–5 years in IAM, strong cloud IAM administration, and experience with IdP tools like Okta, CyberArk, SailPoint.

Qualifications

• 4–5 years in IAM engineering and identity operations.
• Hands-on IAM administration across at least two major cloud platforms.
• Knowledge of SAML, OIDC, OAuth, SCIM and IdP tools.
• Bachelor’s degree in CS/IT/Cybersecurity or equivalent.

Responsibilities

• Provision, modify, and revoke access; enforce RBAC/ABAC and least privilege.
• Administer SSO, MFA, Conditional Access, and federation protocols across IdPs.
• Onboard cloud accounts, define roles, and enforce access guardrails.
• Triages CSPM alerts; remediate privileged/dormant identities; support audits.
• Handle access requests and incidents via Jira/ServiceNow; weekend on-call.

Skills

Scripting & Automation

RBAC/ABAC Knowledge

IAM administration

Education

Bachelor’s degree in CS/IT/Cybersecurity

Tools

CSPM tools (Wiz/Prisma Cloud)

PAM solutions

Okta / Entra / Ping Identity

CyberArk

SailPoint

SCIM

Terraform

Job description

• Experience: 4.00 + years
• Salary: Confidential (based on experience)
• Expected Notice Period: 7 Days
• Shift: (GMT+05:30) Asia/Kolkata (IST)
• Opportunity Type: Remote
• Placement Type: Full Time Contract for 3 Months(40 hrs a week/160 hrs a month)
• (*Note: This is a requirement for one of Uplers' client - Security Consulting Firm)

What do you need for this opportunity?

Must have skills required: CSPM tools, Operational support models, Scripting and Automation, security or cloud certifications, Cyberark, IAM administration, IAM engineering, OAuth, OIDC, SailPoint, SCIM, Cloud Server (Google / AWS)

About The Role

The Cloud Security team is seeking a Senior IAM Engineer to operate, maintain, and enhance enterprise identity platforms across a multi-cloud footprint (AWS, Azure, GCP, and OCI). This role delivers real-time operational coverage during US business hours, focusing on access management, cloud account onboarding, least-privilege enforcement, and identity automation.

Key Responsibilities

• Identity Lifecycle Management: Provision, modify, and revoke access for users and service accounts enforce RBAC/ABAC and least-privilege principles across cloud IAM roles, policies, and permission sets.
• Federation & Authentication: Support and administer enterprise SSO, MFA, Conditional Access, and federation protocols (SAML 2.0, OIDC, OAuth 2.0, SCIM) across identity providers and cloud environments.
• Cloud Account Onboarding: Implement IAM security baselines, role structures, and access guardrails for new cloud accounts, subscriptions, and projects.
• Security & Governance: Triage CSPM alerts, remediate over-privileged or dormant identities, enforce tagging standards, and deliver evidence for compliance audits.
• Operations & Support: Manage access requests and incidents via ticketing systems (Jira/ServiceNow), conduct shift handoffs, and participate in a scheduled weekend on-call rotation.

Qualifications

• Experience: 4–5 years in IAM engineering, access governance, and enterprise identity operations.
• Cloud Infrastructure: Strong hands-on IAM administration across at least two major platforms (AWS, Azure, or GCP).
• Protocols & IdPs: In-depth working knowledge of SAML, OIDC, OAuth, SCIM, and enterprise tools (e.g., Okta, Microsoft Entra ID, Ping Identity, CyberArk, or SailPoint).
• Education: Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or equivalent practical experience.

Preferred Qualifications

• Scripting and automation proficiency using Python, Bash, PowerShell, or Terraform.
• Hands-on experience with CSPM tools (Wiz, Prisma Cloud), PAM solutions, or Oracle Cloud Infrastructure (OCI).
• Active security or cloud certifications (e.g., AWS Certified Security, AZ-500, GCP Cloud Security Engineer, Okta Certified, CISSP, or CCSP).
• Prior experience in follow-the-sun or 24/7 operational support models.