Senior Cloud IAM Architect: Multi-Cloud Security & SSO

Baptist Health; Coral Gables (FL); On-site; USD 122,475 - 159,217; Full time

Job summary

Baptist Health is seeking a Principal Cloud IAM Engineer to design, implement, and govern a multi-cloud IAM ecosystem. You will be the primary architect for cloud security boundaries, ensuring least-privilege access across cloud environments and productivity suites.

Responsibilities include leading IAM architecture, SSO across AWS, Azure Entra, and Google Workspace, and defining an enterprise-wide delegation model. Strong IaC and scripting skills, HIPAA/compliance experience preferred.

Qualifications

• Master's degree in computer science or related fields.
• 10+ years of dedicated cloud engineering experience, with at least 5 years focused on Cloud IAM.
• Hands-on administration with AWS IAM Identity Center, Azure Entra ID, Google Workspace.
• Experience designing IAM delegation models for mid-to-large engineering organizations.
• Deep understanding of SAML 2.0, OAuth 2.0, and OIDC.

Responsibilities

• Multi-Cloud IAM Architecture & Administration.
• AWS IAM Identity Center: Architect and manage centralized SSO, permission sets, and multi-account access.
• Azure Entra ID: Configure Enterprise Apps, App Registrations, conditional access policies, and group management.
• Google Workspace: Govern admin controls, OUs, third-party app permissions, and API scopes.
• IAM Delegation Model: Define an enterprise-wide delegation model between central security, platform, and product squads.
• Access Control Patterns: Implement RBAC and ABAC using tags and directory attributes.
• Guardrails at Scale: Design and enforce SCPs, Management Group policies, and Organization Policies.
• Federation, Provisioning & Automation: SSO, SCIM-based provisioning, and automation pipelines.
• IaC: Treat IAM as code using Terraform or OpenTofu.
• Automation Scripting: Write scripts (Python, Go, Bash) for audits and cleanup.

Skills

Cloud IAM

Identity Federation

RBAC/ABAC

SAML 2.0/OIDC/OAuth 2.0

Security Best Practices

Education

Masters degree in computer science or related fields

Tools

Terraform

OpenTofu

Python

Go

Bash

Job description

Baptist Health is seeking a Principal Cloud IAM Engineer to design, implement, and govern a multi-cloud IAM ecosystem. You will be the primary architect for cloud security boundaries, ensuring least-privilege access across cloud environments and productivity suites.

Responsibilities include leading IAM architecture, SSO across AWS, Azure Entra, and Google Workspace, and defining an enterprise-wide delegation model. Strong IaC and scripting skills, HIPAA/compliance experience preferred.