Ingeniero de Seguridad Cloud

PwC Argentina; United States; Remote; USD 120,000 - 150,000; Full time

Job summary

PwC Argentina is seeking a Cloud IAM Engineer to shape identity and access across our clients' cloud accounts. You will audit IAM boundaries, reduce permissions, and implement guardrails as code to prevent over-privileged service access.

You should have real hands-on experience with AWS, Azure, or GCP identity models, be fluent with Terraform or similar IaC tools, and be able to read policy documents to spot unintended permissions.

Qualifications

• Must have hands-on experience auditing IAM boundaries and policy review.
• Ability to read and interpret policy documents to identify unintended permissions.
• Experience with IaC tools for guardrail implementation.

Responsibilities

• Audit IAM boundaries and cut unnecessary permissions.
• Implement infrastructure guardrails as code.
• Investigate unusual access patterns and potential lateral movement.

Skills

IAM auditing

Policy review

Infrastructure as Code

Tools

Terraform

AWS/Azure/GCP IAM

Kubernetes

Job description

You are responsible for how identity and access are configured across the company's cloud accounts: which roles exist, what each one can reach, and what happens when a service has more permission than it needs. The work is a mix of auditing existing configuration, writing infrastructure-as-code guardrails, and investigating unusual access patterns. Most serious issues in cloud environments come from permissive policies rather than software vulnerabilities.

What you will do:

• Audit IAM boundaries and cut the permissions nothing uses
• Write the infrastructure guardrails as code
• Investigate anything that looks like lateral movement

What they ask for:

• Real experience with AWS, Azure or GCP identity models
• Terraform or an equivalent, used in anger
• Can read a policy document and find what it accidentally allows

Nice to have:

• Kubernetes
• Detection engineering
• Cloud certifications