Cloud IAM Engineer @Irving, TX/Jersey City, NJ/Tampa, FL | Full Time

Acestack; Irving (TX); On-site; USD 120,000 - 180,000; Full time

Job summary

Acestack is seeking a Cloud IAM Engineer to join our Irving, TX team. You will develop Python-based IAM tooling and integrate with AWS/GCP services, driving secure identity management through CI/CD pipelines.

You will work with security engineers, cloud architects, and threat modelers to implement policy enforcement, automated tests, and scalable APIs for IAM in complex environments.

Qualifications

• This is a development-heavy engineering role requiring strong coding expertise.
• Minimum of 3 years of hands-on experience with cloud-native services in AWS or GCP.
• Advanced proficiency in Python.
• Experience with API development and integrations.
• Experience designing enterprise security solutions in financial services or global environments.
• Certifications such as CISSP, AWS Security Specialty, or Google Professional Cloud Security Engineer are desirable.

Responsibilities

• Collaborate with cross-functional cloud teams to define and implement IAM roles and policies.
• Define and develop security controls and tools to ensure IAM implementations are compliant with cloud security standards.
• Build automation to enable developers to create IAM identities via self-service and CI/CD pipelines with automated testing.
• Develop Python-based frameworks for security control orchestration and detection workflows.
• Develop integrations with cloud services, security tooling, and platforms.
• Contribute to preventative and detective controls and automate testing coverage.
• Write and maintain automated unit, integration, and behavioral tests.
• Support CI/CD integration and continuous validation of controls.
• Collaborate with Security Controls Engineers, Threat Modelers, and Cloud Architects.

Skills

Python development

Cloud security

CI/CD

APIs design

IaC

Testing

Education

Certifications such as CISSP / AWS Security Specialty (desirable)

Tools

Terraform

CloudFormation

Behave/pytest/Junit

Go/Java

Job description

Job Title: Cloud IAM Engineer
Location: Irving, TX/Jersey City, NJ/Tampa, FL

Full Time

Job Description

Responsibilities

Collaborate with cross-functional cloud teams including security, infrastructure, service engineering and business application teams to define and implement IAM roles and policies required to build, support and consume services in public cloud.

Define and develop security controls and tools to ensure IAM implementation in public cloud environments are compliant with cloud security standards and policies.

Build automation and libraries to enable developers to create IAM identities and permissions through self-service. Deliver IAM solutions through CI/CD pipelines with automated testing and validation.

Build and enhance Python-based frameworks used for:

• Security control orchestration
• Detection and response workflows

Develop integrations with:

• Cloud services (APIs, services, identity layers)
• Security tooling and platforms

Contribute to:

• Preventative controls (policy enforcement, OPA/Rego)
• Detective controls (event-driven detection logic)

Write and maintain:

• Automated unit tests
• Integration and behavioral tests

Support CI/CD integration and continuous validation of controls

Collaborate with:

• Security Controls Engineers
• Threat Modelers
• Cloud Architects

Qualifications

This is not a traditional security or IAM role. It is a development-heavy engineering role requiring strong coding expertise. Candidates must have proven Python development experience.

Minimum of 3 years of hands-on experience working with cloud-native services in AWS or GCP.

Advanced proficiency in Python (non-negotiable)

Experience with:

• API development and integrations
• Writing scalable, production-grade code
• Automated testing framework

Experience in the design and implementation of enterprise security solutions in Financial Services or a large complex and/or global environment

Highly motivated self-starter with excellent interpersonal and communication skills

Ability to work independently, multi-task, and take ownership of various parts of a project or initiative.

Relevant certifications such as CISSP, AWS Certified Security Specialty, Google Professional Cloud Security Engineer are desirable

MUST pass a Karat Assessment Python focused

Critical Competencies

• Experience with infrastructure as code (IaC) tools: Terraform and CloudFormation
• Proficiency in Python, Go or Java
• Proficiency in unit testing frameworks such as Behave, pytest or Junit
• Proficiency in developing and securing SOAP and REST based web service APIs
• Experience in DevOps and agile methodologies and automated solution delivery and testing through CI/CD pipelines