Cloud IAM Security Engineer — Guardrails & Audits

Spendesk; United States; Remote; USD 120,000 - 160,000; Full time

Job summary

Spendesk is seeking a specialist to manage identity and access across cloud accounts. You will audit IAM boundaries, reduce excessive permissions, and implement guardrails as code to enforce least privilege.

You will also investigate suspicious activity and lateral movement patterns to protect critical assets. The role focuses on real-world IAM challenges, leveraging Terraform and cloud IAM models, with a strong emphasis on policy review and secure infrastructure practices across AWS, Azure or

Qualifications

• Real experience with AWS, Azure or GCP identity models.
• Ability to read a policy document and identify unintended permissions.
• Experience writing infrastructure as code guardrails.
• Experience auditing permissions to minimize blast radius.

Responsibilities

• Audit IAM boundaries and cut the permissions nothing uses
• Write the infrastructure guardrails as code
• Investigate anything that looks like lateral movement

Skills

Cloud IAM experience

Policy analysis

IaC guardrails

Lateral movement investigation

Tools

Terraform

Kubernetes

Policy as code

Job description

Spendesk is seeking a specialist to manage identity and access across cloud accounts. You will audit IAM boundaries, reduce excessive permissions, and implement guardrails as code to enforce least privilege.

You will also investigate suspicious activity and lateral movement patterns to protect critical assets. The role focuses on real-world IAM challenges, leveraging Terraform and cloud IAM models, with a strong emphasis on policy review and secure infrastructure practices across AWS, Azure or