Senior Cloud Specialist

ALTEN Polska; Kraków; On-site; PLN 180,000 - 300,000; Full time

Benefits offered by this job

Full-time contract

Work equipment provided

Conferences and trainings

Certification opportunities

Relocation opportunities

Project rotation

Great Place To Work

Certifications with partners

Job summary

ALTEN Polska is seeking a senior IAM controls expert to act as SME for cloud IAM governance. You will support control design, assessment and remediation across Azure, AWS and GCP environments.

Join a security-focused team and collaborate with Risk, Compliance and Engineering to drive scalable IAM controls and automation.

Qualifications

• Proven experience as a senior SME for IAM controls across cloud environments.
• Experience with cloud IAM capabilities and privilege/access governance.
• Ability to translate complex IAM findings into actionable recommendations.

Responsibilities

• Act as senior SME for IAM controls across cloud environments and support control ownership.
• Assess control design, operating effectiveness and remediation actions.
• Investigate IAM control issues and provide evidence-based resolutions.
• Collaborate with risk, compliance, engineering and audit stakeholders.

Skills

IAM controls

Cloud security

Data analysis

Stakeholder management

Technical writing

Education

Bachelor's degree in a relevant field

Tools

Azure Entra ID

AWS IAM

GCP IAM

Job description

We are part of the ALTEN Group – a leading European provider of engineering and technology consulting servics.

Join ALTEN Polska and let’s grow together!

Key Skills and Qualifications:

• Act as a senior SME for IAM controls across cloud environments; support the IAM Cloud Control Owner with control design, implementation, assessment and continuous improvement.
• Assess the effectiveness of controls across areas such as: identity lifecycle (Joiner/Mover/Leaver in cloud), privileged access management, access governance/reviews, authentication/authorisation, role & permission management, least privilege, segregation of duties, service accounts/non-human identities, workload identities, entitlement management and excessive access.
• Analyse cloud IAM data to identify control gaps, anomalies, toxic/excessive permissions and associated risks.
• Investigate complex IAM control issues, determine root cause, and provide clear evidence-based remediation recommendations.
• Challenge existing control approaches and identify opportunities to improve efficiency, scalability and automation.

Audit, Risk & Regulatory support

• Act as a key SME for internal/external audits related to Cloud, IAM and Cybersecurity.
• Collect and prepare audit evidence using cloud-native tools and technical analysis (not Excel-only), ensuring evidence is accurate, traceable and defensible.
• Assess control design and operating effectiveness; identify deficiencies, root causes and sustainable remediation actions.
• Identify recurring audit themes and drive improvements to reduce repeat audit effort.
• Partner closely with Technology, Cloud Engineering, Risk, Compliance and Audit stakeholders.

Cloud security & technical analysis (hands-on)

• Review cloud IAM configurations, access models, roles/policies and privileged permissions.
• Use cloud-native logging/monitoring and security tooling to answer control questions and support investigations.
• Develop repeatable approaches for IAM assessments and support automation/optimisation of control testing and evidence collection.
• Translate technical findings into clear risk and control conclusions for senior stakeholders.

Required experience & skills (must-have)

Public cloud (mandatory)

• Proven professional experience working with at least one major cloud platform: Azure, AWS or GCP.
• Hands-on experience with cloud IAM capabilities, e.g. Azure Entra ID/Azure AD & Azure RBAC, AWS IAM policies/roles/permissions, GCP IAM & service accounts, cloud privileged access and access governance.

IAM / cybersecurity / controls

• Significant experience in IAM, Cybersecurity, IT Controls, or a closely related technical discipline.
• Strong understanding of IAM principles and control frameworks (authentication/authorisation, PAM, identity lifecycle, access governance, RBAC, least privilege, SoD, access certification/recertification, non-human identities).
• Proven ability to investigate control weaknesses and drive remediation in complex enterprise environments.
• Ability to work independently on complex, ambiguous problems and operate as a trusted SME.
• Strong stakeholder management and influencing skills across Cybersecurity, Engineering, Risk, Compliance and Audit.
• Ability to communicate complex technical topics as clear, actionable control and risk outcomes.

We offer

• A full-time contract (B2B also possible)
• All necessary work equipment is provided by us (computer, monitor etc).
• Participation in company many conferences, trainings, workshops, integration meetings, etc.
• Certification and training opportunities
• Opportunity to relocate and work in different ALTEN Polska branches
• After completion of the project, opportunity to engage in a subsequent one within the company.
• Work in company with #GreatPlaceToWork Certificate\
• Access to professional certifications with our technology partners (e.g. Google, ISTQB)