IAM Engineer: Cloud, PAM & Zero-Trust

Phase2 Technology; Atlanta (GA); Hybrid; USD 95,000 - 130,000; Full time

Job summary

Gordon Food Service is seeking an Identity Access Management Engineer to design, implement, and maintain IAM solutions. You will work with senior IAM engineers, support provisioning, deprovisioning, PAM, and cloud integration, while learning IaC and CI/CD practices to automate IAM workflows.

You will contribute to policy development, collaborate with cross-functional teams, and participate in on-call support, developing secure access controls and identity governance across our environment.

Qualifications

• Knowledge of IAM principles and access governance
• Experience provisioning/deprovisioning and access requests
• Familiarity with zero-trust concepts and architectures
• Ability to collaborate with cross-functional teams and communicate effectively

Responsibilities

• Assist in designing and implementing IAM solutions to meet security requirements
• Support identity lifecycle management and access requests
• Help deploy and manage PAM to secure privileged accounts
• Collaborate with engineers to integrate IAM with cloud environments and CI/CD
• Contribute to IaC-based automation for IAM infrastructure
• Document IAM policies, standards, and procedures
• Provide guidance on IAM-related topics to stakeholders
• Maintain and troubleshoot IAM systems and participate in on-call rotations

Skills

IAM concepts

PAM knowledge

Cloud platforms

IaC principles

CI/CD tooling

Scripting: JavaScript

Scripting: Groovy

Communication skills

Education

Bachelor's degree in cybersecurity or CS or related field

Job description

Gordon Food Service is seeking an Identity Access Management Engineer to design, implement, and maintain IAM solutions. You will work with senior IAM engineers, support provisioning, deprovisioning, PAM, and cloud integration, while learning IaC and CI/CD practices to automate IAM workflows.

You will contribute to policy development, collaborate with cross-functional teams, and participate in on-call support, developing secure access controls and identity governance across our environment.