Cloud IAM Engineer

Tata Consultancy Services; Irving (TX); On-site; USD 100,000 - 130,000; Full time

Job summary

Tata Consultancy Services is seeking a development-heavy security role focused on IAM in cloud environments. You will contribute to building, testing, and deploying IAM identities and permissions using Python across AWS/GCP, with strong emphasis on automation and CI/CD pipelines.

Ideal candidates have 3+ years in cloud-native services, advanced Python skills, and experience with security solutions in large-scale settings. Pass Karat Python assessment is required.

Qualifications

• Strong Python development experience.
• 3+ years of hands-on experience with cloud-native services in AWS or GCP.
• Experience with API development and integrations.
• Writing scalable, production-grade code.
• CI/CD testing and automation skills.
• Experience designing and implementing enterprise security solutions in large/global environments.
• Must pass Karat Assessment focusing on Python.
• Bachelor's degree in Computer Science or equivalent.

Responsibilities

• Collaborate with cross-functional cloud teams to define IAM roles and policies.
• Define security controls and tools to ensure IAM compliance in cloud environments.
• Build automation allowing developers to create IAM identities via self-service.
• Deliver IAM solutions through CI/CD pipelines with automated testing and validation.
• Develop Python-based frameworks for security control orchestration and detection workflows.
• Develop integrations with cloud services and security platforms.
• Contribute to preventive and detective security controls.
• Write and maintain automated tests (unit/integration).
• Support CI/CD integration and continuous validation of controls.
• Collaborate with Security Controls Engineers, Threat Modelers, and Cloud Architects.

Skills

Python development

AWS/GCP

API development

CI/CD pipelines

Security controls

IaC tooling

Unit testing

Karat Python

Education

Bachelor's degree in Computer Science

Tools

Terraform

CloudFormation

Behave

pytest

Junit

Job description

Responsibilities

• Collaborate with cross‑functional cloud teams including security, infrastructure, service engineering and business application teams to define and implement IAM roles and policies required to build, support and consume services in public cloud.
• Define and develop security controls and tools to ensure IAM implementation in public cloud environments are compliant with cloud security standards and policies.
• Build automation and libraries to enable developers to create IAM identities and permissions through self‑service. Deliver IAM solutions through CI/CD pipelines with automated testing and validation.
• Build and enhance Python‑based frameworks used for:
• Security control orchestration
• Detection and response workflows
• Develop integrations with:
• Cloud services (APIs, services, identity layers)
• Security tooling and platforms
• Contribute to:
• Preventative controls (policy enforcement, OPA/Rego)
• Detective controls (event‑driven detection logic)
• Write and maintain:
• Automated unit tests
• Integration and behavioral tests
• Support CI/CD integration and continuous validation of controls
• Collaborate with:
• Security Controls Engineers
• Threat Modelers
• Cloud Architects

Qualifications

This is not a traditional security or IAM role. It is a development‑heavy engineering role requiring strong coding expertise. Candidates must have proven Python development experience.

• Minimum of 3 years of hands‑on experience working with cloud‑native services in AWS or GCP.
• Advanced proficiency in Python (non‑negotiable)
• Experience with:
• API development and integrations
• Writing scalable, production‑grade code
• Automated testing framework
• Experience in the design and implementation of enterprise security solutions in Financial Services or a large complex and/or global environment
• Highly motivated self‑starter with excellent interpersonal and communication skills
• Ability to work independently, multi‑task, and take ownership of various parts of a project or initiative.
• Relevant certifications such as CISSP, AWS Certified Security Specialty, Google Professional Cloud Security Engineer are desirable
• MUST pass a Karat Assessment – Python focused

BACHELOR OF COMPUTER SCIENCE

Critical Competencies

• Experience with infrastructure as code (IaC) tools: Terraform and CloudFormation
• Proficiency in Python, Go or Java
• Proficiency in unit testing frameworks such as Behave, pytest or Junit
• Proficiency in developing and securing SOAP and REST based web service APIs
• Experience in DevOps and agile methodologies and automated solution delivery and testing through CI/CD pipelines

Salary Range: $100,000 to $130,000 per year