Senior Cloud IAM Engineer (Microsoft Entra ID & AWS)

UST; San Jose (CA); Remote; USD 150,000 - 190,000; Full time

Benefits offered by this job

11 paid holidays

2 weeks paid vacation

Health insurance

Dental insurance

Disability insurance

Life insurance

Job summary

UST is seeking a Senior Cloud IAM Engineer (Microsoft Entra ID, AWS) to design, implement, and manage enterprise IAM across cloud platforms. This remote role (Costa Rica) requires expertise in Entra ID, MFA, SSO, and cross-cloud identity architectures, ensuring secure access and scalable identity services.

You will partner with Cloud, Security, Infrastructure, and Compliance teams to advance Zero Trust, manage governance, and strengthen the organization’s identity posture in a rapidly evolving

Qualifications

• Microsoft Certified: Identity and Access Administrator Associate (SC-300)
• Microsoft Certified: Azure Security Engineer Associate (AZ-500)
• Microsoft Certified: Cybersecurity Architect Expert (SC-100)
• AWS Certified Security - Specialty
• AWS Certified Advanced Networking - Specialty (preferred)
• Certified Identity and Access Manager (CIAM) or equivalent IAM certification
• Skills: AWS, AWS IAM Roles, AWS Secrets Manager, Azure Managed Identity

Responsibilities

• Serve as SME for Microsoft Entra ID and Cloud Identity Services, managing identity lifecycle, authentication, authorization, federation, and cloud-native identity integrations.
• Implement MFA, Conditional Access, Identity Protection, PIM, Access Reviews, Entitlement Management, and SSO.
• Design and support secure authentication and federation architectures using SAML, OAuth 2.0, OIDC, and FIDO2.
• Manage IAM roles, policies, federated access, workload identities, and least-privilege across AWS and Azure.
• Govern enterprise apps and privileged access: App Registrations, Service Principals, AWS IAM Roles, Secrets Management.
• Drive IAM governance, RBAC, SoD, audit readiness, and regulatory compliance initiatives.
• Manage identity security tech like Azure Key Vault, AWS Secrets Manager, Vault, certificate lifecycle, and workload identities.
• Implement cloud-native identity architectures and federated access patterns to minimize long-lived credentials.
• Collaborate with Cloud, Security, Infrastructure, and Compliance teams to advance Zero Trust and secure cloud transformation.

Skills

AWS

AWS IAM Roles

AWS Secrets Manager

Azure Managed Identity

Education

CIAM or equivalent IAM certification

Job description

Role description

Senior Cloud IAM Engineer (Microsoft Entra ID & AWS)

(Remote, Costa Rica)

Who We Are:

Born digital, UST transforms lives through the power of technology. We walk alongside our clients and partners, embedding innovation and agility into everything they do. We help them create transformative experiences and human-centered solutions for a better world.

UST is a mission-driven group of 29,000+ practical problem solvers and creative thinkers in more than 30 countries. Our entrepreneurial teams are empowered to innovate, act nimbly, and create a lasting and sustainable impact for our clients, their customers, and the communities in which we live.

With us, you'll create a boundless impact that transforms your career-and the lives of people across the world.

Visit us at UST.com.

You Are:

UST is searching for a Senior Cloud IAM Engineer who will design, implement, and manage enterprise Identity & Access Management (IAM) solutions across Microsoft Entra ID, Azure, and AWS, ensuring secure, scalable, and resilient identity services.

The opportunity:

• Serve as the Subject Matter Expert (SME) for Microsoft Entra ID and Cloud Identity Services, managing identity lifecycle, authentication, authorization, federation, and cloud-native identity integrations.
• Implement modern identity security controls including Multi-Factor Authentication (MFA), Conditional Access, Identity Protection, Privileged Identity Management (PIM), Access Reviews, Entitlement Management, and Single Sign-On (SSO).
• Design and support secure authentication and federation architectures using SAML, OAuth 2.0, OpenID Connect (OIDC), and FIDO2 standards to enable secure access across cloud and SaaS platforms.
• Manage cloud identity and access controls across AWS and Azure, including IAM roles, policies, federated access, workload identities, managed identities, service principals, cross-account access, and least-privilege enforcement.
• Lead governance of enterprise applications and privileged access, including Azure Enterprise Applications, App Registrations, Service Principals, AWS IAM Roles, Secrets Management, and privileged account controls.
• Drive IAM governance, compliance, and risk management through access certifications, role-based access control (RBAC), segregation of duties (SoD), audit readiness, and regulatory compliance initiatives.
• Manage identity security technologies and supporting infrastructure, including Azure Key Vault, AWS Secrets Manager, HashiCorp Vault, certificate lifecycle management, and machine/workload identities.
• Implement and support cloud-native identity architectures, including Microsoft Entra Workload Identities, Azure Managed Identities, AWS IAM Roles, and federated access patterns to eliminate reliance on long-lived credentials.
• Partner with Cloud, Security, Infrastructure, and Compliance teams to advance Zero Trust adoption, strengthen identity security posture, remediate IAM-related findings, and support secure cloud transformation initiatives.

This position description identifies the responsibilities and tasks typically associated with the performance of the position. Other relevant essential functions may be required.

What you need:

• Microsoft Certified: Identity and Access Administrator Associate (SC-300)
• Microsoft Certified: Azure Security Engineer Associate (AZ-500)
• Microsoft Certified: Cybersecurity Architect Expert (SC-100)
• AWS Certified Security - Specialty
• AWS Certified Advanced Networking - Specialty (preferred)
• Certified Identity and Access Manager (CIAM) or equivalent IAM certification
• Skills: AWS, AWS IAM Roles, AWS Secrets Manager, Azure Managed Identity

Benefits

• Employees receive eleven (11) paid holidays, two (2) weeks of paid vacation per year, and are eligible for health, dental, disability and life insurance.

What we believe:

We proudly embrace the values that have shaped UST since day one. We build our culture of Humility, Humanity, and Integrity. These values inspire us to nurture a people-first, human centric culture that fosters diversity, prioritizes sustainable solutions, and keeps our people and clients at the forefront of all decisions.

Humility:

We will listen, learn, be empathetic and help selflessly in our interactions with everyone.

Humanity:

Through business, we will better the lives of those less fortunate than ourselves.

Integrity:

We honor our commitments and act with responsibility in all our relationships.

An Equal Opportunity Workplace, Free of Discrimination and Harassment

At UST, we strive to provide a work environment free of discrimination and harassment. We are an equal opportunity employer and employment decisions are based on merit and business needs. Our Human Rights Policy further illustrates our stand on this. We are committed to following fair employment practices that provide equal opportunities to all employees. We do not discriminate or allow harassment on the basis of race, color, religion, disability, gender, national origin, sexual orientation, gender identity, gender expression, age, genetic information, military status, or any other legally protected status. At UST, we value diversity and believe that a diverse workplace builds a competitive advantage.

Un lugar de trabajo con igualdad de oportunidades y libre de discriminacion y acoso

En UST, nos esforzamos por proporcionar un ambiente de trabajo libre de discriminacion y acoso. Somos un empleador que ofrece igualdad de oportunidades y basa las decisiones de empleo en los meritos y las necesidades del negocio. Estamos comprometidos a seguir practicas de empleo justas que brinden igualdad de oportunidades a todos los empleados. No discriminamos ni permitimos el acoso por motivos de raza, color, religion, discapacidad, genero, origen nacional, orientacion sexual, identidad de genero, expresion de genero, edad, informacion genetica, estado militar o cualquier otro estado legalmente protegido. En UST, valoramos la diversidad y creemos que un lugar de trabajo diverso construye una ventaja competitiva.

UST reserves the right to periodically redefine your roles and responsibilities based on the requirements of the organization and/or your performance.

#UST #LI-JJ3

#LI-Remote

Skills

AWS, AWS IAM Roles, AWS Secrets Manager, Azure Managed Identity