Cloud Identity and Access Management Engineer - Contract

The Cyber Data Risk and Resilience (CDRR) team is responsible for enabling the public cloud to become a preferred platform across client environment This is a global, multi-discipline team responsible for architecting and delivering secure, robust, and innovative solutions which would enable the development teams to build and deploy new applications as well as migrate selected existing applications into the public cloud.

but primarily in the Cloud Identity and Access Management (CIAM) space

Primary Responsibilities:

• Providing IAM solutions for migrating existing or integrating new applications in the client’s environment across multiple Cloud providers including but not limited to Azure and AWS
• Provide IAM services for complex, multi-tier applications that are migrating to Cloud Platforms
• Selecting appropriate IAM Cloud controls for migrating applications based on given requirements
• Working in a globally distributed team to provide innovative and robust Cloud centric solutions
• Closely working with Vendors to develop and deploy Cloud services to meet customer expectations
• Integrate, configure, document, and deploy compliant infrastructure and supporting services in the Cloud platform
• Design, Optimization and Document the Operational aspects of the Cloud platform
• Troubleshooting problems, resolving root cause, and where possible, fixing the bug(s)
• Collaborate with Risk Management to ensure necessary controls to Cloud services are deployed and tested

Skills Required:

• Strong knowledge of Azure AD and related services such as Conditional access, Identity protection, Privileged identity management, etc.
• Strong knowledge of authentication with SAML, OAuth, OpenID, and Kerberos
• Experience in providing Federated Identity with solutions such as PING Federate or ADFS
• Knowledge of the Zero Trust Architecture principles
• Prior experience in providing RBAC solutions for AWS and Azure
• Experience creating technical architecture documentation
• Strong communication and written skills
• Strong scripting and automation abilities including PowerShell and/or Python

Skills Desired:

• Prior experience in the Identity space with a background in Active Directory or similar LDAP stores
• Working knowledge of Azure Active Directory Connect synchronization software or similar technology
• Prior experience using compliance assurance tooling such as Prisma Cloud
• Prior experience with products from HashiCorp such as Terraform, Vault and Consul
• Prior experience with risk control frameworks and engagements with risk and regulatory functions
• Knowledge and experience of working with CI/CD frameworks and methodologies such as automated testing (unit / integration) and release pipelines (e.g. Jenkins, GitHub Actions)

Experience in the financial industry