Ingeniero de Seguridad Cloud

Skyone; United States; Remote; USD 90,000 - 130,000; Full time

Job summary

Skyone is seeking a security-minded professional to manage identity and access across its cloud accounts. You will audit IAM boundaries, trim permissions, and codify guardrails as infrastructure-as-code to prevent excessive access.

You will review policy documents, identify misconfigurations, and investigate unusual access patterns. Experience with multi-cloud identity models and Terraform is essential for success in this role.

Qualifications

• Real experience with AWS, Azure or GCP identity models.
• Hands-on Terraform or equivalent IaC tool.
• Ability to read and audit policy documents for over-privilege.

Responsibilities

• Audit IAM boundaries and cut the permissions nothing uses.
• Write the infrastructure guardrails as code.
• Investigate anything that looks like lateral movement.

Skills

Cloud identity models

Policy analysis

IaC guardrails proficiency

Tools

Terraform

Cloud IAM tooling

Job description

You are responsible for how identity and access are configured across the company's cloud accounts: which roles exist, what each one can reach, and what happens when a service has more permission than it needs. The work is a mix of auditing existing configuration, writing infrastructure-as-code guardrails, and investigating unusual access patterns. Most serious issues in cloud environments come from permissive policies rather than software vulnerabilities.

What you will do:

• Audit IAM boundaries and cut the permissions nothing uses
• Write the infrastructure guardrails as code
• Investigate anything that looks like lateral movement

What they ask for:

• Real experience with AWS, Azure or GCP identity models
• Terraform or an equivalent, used in anger
• Can read a policy document and find what it accidentally allows

Nice to have:

• Kubernetes
• Detection engineering
• Cloud certifications