Cloud Platform Security Engineer II - IAM and DevSecOps

U.S. Bank; Charlotte (NC); Hybrid; USD 105,000 - 124,000; Full time

Benefits offered by this job

Healthcare (medical, dental, vision)

Life insurance

Disability insurance

Parental leave

401(k)

Paid vacation

Paid holidays

Adoption assistance

Sick leave

Job summary

U.S. Bank is seeking an engineer for the Identity and Access Management Cloud Platform Security Engineering team. In this role, you will be part of a team dedicated to enabling and supporting U.S. Bank's cloud adoption journey.

The role focuses on secure cloud deployments and automation, with hands-on work across Azure, AWS, and GCP, and collaboration with security, application, and infrastructure teams. A strong IAM and security engineering background is required.

Qualifications

• 3+ years of experience securing cloud environments (Azure, AWS, or GCP).
• Hands-on IaC with Terraform, CloudFormation, ARM/Bicep, or Ansible.
• Strong scripting in Python, PowerShell, or Bash.
• Experience building CI/CD pipelines and DevSecOps practices.
• Knowledge of IAM, authentication, authorization, and cloud security best practices.
• Experience with Microsoft Entra ID, AD, Conditional Access, PIM, SSO, or AWS IAM Identity Center.
• Familiarity with CyberArk, HashiCorp Vault, or other PAM solutions.
• Experience supporting Windows, Linux, containers, and cloud-native platforms.

Responsibilities

• Design, implement, and support secure cloud infrastructure across Azure, AWS, and GCP.
• Partner with application, infrastructure, and security teams to drive cloud adoption and security best practices.
• Develop and maintain reusable IaC solutions using Terraform, CloudFormation, ARM/Bicep, or Ansible.
• Build automation to enforce IAM governance, compliance, and security controls.
• Evaluate and enhance cloud architectures to improve security, scalability, reliability, and efficiency.
• Develop and support CI/CD pipelines for IaC and Policy as Code implementations.
• Assess emerging cloud services and define secure implementation standards and reference architectures.
• Troubleshoot and resolve complex cloud security, identity, and infrastructure issues.

Skills

Multi-cloud (Azure/AWS/GCP)

IaC tooling

Scripting

CI/CD/DevSecOps

IAM security

IAM tools

Secrets management

OS & container flexibility

Tools

Terraform

CloudFormation

Ansible

ARM/Bicep

Job description

U.S. Bank is seeking an engineer for the Identity and Access Management Cloud Platform Security Engineering team. In this role, you will be part of a team dedicated to enabling and supporting U.S. Bank's cloud adoption journey.

The role focuses on secure cloud deployments and automation, with hands-on work across Azure, AWS, and GCP, and collaboration with security, application, and infrastructure teams. A strong IAM and security engineering background is required.