Cloud Security Engineer II — IAM & Platform Automation

U.S. Bank; Irving (TX); On-site; USD 105,000 - 124,000; Full time

Benefits offered by this job

Healthcare

401(k)

Paid vacation

Holiday opportunities

Parental leave

Sick leave

Job summary

U.S. Bank is seeking an engineer to join the Identity and Access Management (IAM) Cloud Platform Security Engineering team.

You will enable and support the bank's cloud adoption journey, focusing on secure cloud infrastructure across Azure, AWS, and GCP, with emphasis on IAM governance and automation. The role requires hands-on experience with IaC (Terraform/CloudFormation/ARM/Bicep/Ansible), scripting (Python/PowerShell/Bash), and CI/CD pipelines.

Qualifications

• 3+ years of experience managing and securing cloud environments in Azure, AWS, or GCP.
• Hands-on IaC experience with Terraform, CloudFormation, ARM/Bicep, Ansible.
• Strong scripting and automation skills using Python, PowerShell, Bash.
• Experience developing and supporting CI/CD pipelines, automation frameworks, and DevSecOps practices.
• Knowledge of IAM, authentication, authorization, and cloud security best practices.
• Experience with Microsoft Entra ID, Active Directory, Conditional Access, PIM, SSO, or IAM Identity Center.
• Familiarity with CyberArk, HashiCorp Vault, or other privileged access and secrets management solutions.
• Experience supporting Windows, Linux, containerized workloads, and cloud-native platforms.

Responsibilities

• Design, implement, and support secure cloud infrastructure across Azure, AWS, and GCP environments.
• Partner with application, infrastructure, and security teams to drive cloud adoption and security best practices.
• Develop and maintain reusable IaC solutions using Terraform, CloudFormation, ARM/Bicep, or Ansible.
• Build automation and scripting solutions to enforce IAM governance, compliance, and security controls.
• Evaluate and enhance existing cloud architectures to improve security, scalability, reliability, and operational efficiency.
• Develop and support CI/CD pipelines for IaC and Policy as Code implementations.
• Assess emerging cloud services and define secure implementation standards and reference architectures.
• Troubleshoot and resolve complex cloud security, identity, and infrastructure issues.

Skills

Cloud platforms

Terraform

CloudFormation

ARM/Bicep

Ansible

Python

PowerShell

CI/CD

DevSecOps

IAM

Entra ID

Active Directory

Conditional Access

PIM

SSO

IAM Identity Center

CyberArk

HashiCorp Vault

Windows

Linux

Containers

Tools

Docker

Kubernetes

Job description

U.S. Bank is seeking an engineer to join the Identity and Access Management (IAM) Cloud Platform Security Engineering team.

You will enable and support the bank's cloud adoption journey, focusing on secure cloud infrastructure across Azure, AWS, and GCP, with emphasis on IAM governance and automation. The role requires hands-on experience with IaC (Terraform/CloudFormation/ARM/Bicep/Ansible), scripting (Python/PowerShell/Bash), and CI/CD pipelines.