Senior Security Engineer (Cloud)

📋 Description

• • Design, implement, and maintain enterprise identity and access management (IAM) infrastructure to secure corporate systems and data across global environments.
• • Manage user identities, roles, and permissions across cloud and on-premises platforms to enforce least-privilege access principles.
• • Configure and monitor single sign-on (SSO), multi-factor authentication (MFA), and privileged access management (PAM) solutions to mitigate unauthorized access risks.
• • Collaborate with engineering, IT, and compliance teams to integrate security controls into application development and deployment pipelines.
• • Conduct regular access reviews and audits to ensure alignment with internal policies and external regulatory requirements.
• • Respond to security incidents related to identity compromise, credential misuse, or unauthorized access attempts, leading investigation and remediation efforts.
• • Automate provisioning and deprovisioning workflows for user accounts across HR systems, cloud platforms, and enterprise applications.
• • Evaluate and recommend new IAM technologies and vendor solutions to enhance security posture and operational efficiency.
• • Document IAM architecture, policies, procedures, and incident response playbooks for internal knowledge sharing and audit readiness.
• • Provide technical guidance and training to internal teams on secure access practices, phishing prevention, and identity-related threat awareness.
• • Monitor IAM system logs and alerts using SIEM tools to detect anomalous behavior, policy violations, or potential breaches.
• • Ensure IAM infrastructure complies with industry standards such as ISO 27001, NIST, and SOC 2.
• • Work closely with third-party vendors and service providers to secure integrations and manage API-based access controls.
• • Participate in cross-functional security initiatives to align IAM strategy with broader enterprise risk management and cybersecurity frameworks.
• • Stay current with emerging threats in cloud identity exploitation, credential stuffing, and identity federation vulnerabilities.
• • Support global expansion efforts by scaling IAM solutions to accommodate new regions, legal jurisdictions, and workforce models.
• • Maintain high availability and resilience of IAM systems through redundancy planning, failover testing, and performance optimization.
• • Serve as the primary point of contact for IAM-related inquiries from internal stakeholders and external auditors.
• • Contribute to the development of security policies governing user lifecycle management, role-based access control, and session timeout protocols.
• • Partner with HR to automate user onboarding and offboarding processes through integration with HRIS platforms.