Azure IAM Engineer, Atlanta

This role will design, engineer, and maintain solutions which are used to manage access to Azure services and infrastructure, in support of company’s public cloud initiatives.

 

This includes the development of automated pipelines with standardized least-privilege roles, personas, and request processes. Additionally, working across organizational boundaries to understand the technology ecosystem, evaluate new capabilities, and deliver innovative solutions to enable and scale access to cloud services.

 

Essential Responsibilities:

Design, engineer, deploy, and document Azure IAM solutions working closely with application architects & lead engineers, product teams, information security, and risk management functions.

Deploy robust preventative controls & automation to enhance effectiveness of Azure IAM access controls and minimize the Azure IAM attack surface.

Partner with technological product teams on their journey to develop innovative capabilities for company using the right solutions, with the right access, at the right time.

Continuously improve Azure IAM Engineering processes to reduce friction & accelerate the adoption of innovative new cloud technologies for company at scale.

Provide deep subject matter expertise for Azure IAM platform services, entities, configuration, and best practices.

Maintain strong security posture & resiliency through comprehensive compliance and continuous monitoring procedures.

Collaborate with various groups and individuals to troubleshoot and resolve escalated production issues. 

Qualifications/Requirements:

BS/BA in Computer Science / other technical degree or Business Management and 4 years of IT experience or in lieu of degree High School Diploma/GED and 7 years of IT experience.

2+ years of experience engineering Azure IAM solutions.

2+ years of experience deploying Infrastructure-as-code with relevant industry standard tools (Terraform, Bicep, ARM, etc.).

2+ years of experience in the development & operational support of Azure IAM processes, application integrations, vulnerability management, workload support, regulatory compliance, and service delivery/management.

2+ years of experience in automating deployments via BitBucket/Git and Jenkins following DevOps & CI/CD best practices.

Strong understanding of identity and access management principles and best practices on Azure.

 Desired Characteristics:

5+ years of experience engineering complex solutions in the cloud with an emphasis on access management and/or information security.

5+ years of experience with Azure and/or multi-cloud architectures.

10+ years of experience in an engineering function within information technology or security.

Proven analytical mindset; Ability to identify patterns or correlation within data sets.

Critical attention to detail; Ability to coordinate multiple deliverables across multiple teams.

Strong communication, and ability to articulate technical requirements to technical and non-technical stakeholders.

Strong engineering and architecture skills; especially in information security.

Experience working with agile methodologies.

Hands-on experience working across various identity functions including Identity Governance & Administration, Authentication / Authorization, Directory Services, Privilege Management, and Secrets Management.

Experience designing and building resilient API/Microservice solutions with DevOps and fully automated service delivery capabilities.

Knowledge of Personally Identifiable Information (PII) data security standards.

Knowledge of Payment Card Industry (PCI) data security standards.

Knowledge of laws, policies, procedures, or governance relevant to cybersecurity for critical infrastructures.

Knowledge of cyber defense and information security policies, procedures, and regulations.

Knowledge of information technology (IT) risk management policies, requirements, and procedures.

Industry recognized certifications such as Microsoft Azure, CCSP, CISSP, CISA, CISM, GISP, CASP, etc.