Job Summary
The Lead II - Cloud Infrastructure Services professional will design, implement, and manage enterprise Identity and Access Management (IAM) solutions across Microsoft Entra ID, Azure, and AWS. This role serves as a subject matter expert in Microsoft Entra ID and cloud identity services, with responsibility for identity lifecycle management, authentication, authorization, federation, privileged access, and cloud-native identity integrations. The position focuses on strengthening identity security, implementing Zero Trust principles, ensuring compliance, and supporting secure cloud transformation initiatives.
Key Responsibilities
• Design, implement, and manage enterprise IAM solutions across Microsoft Entra ID, Azure, and AWS to ensure secure, scalable, and resilient identity services.
• Serve as the subject matter expert for Microsoft Entra ID and cloud identity services, managing identity lifecycle, authentication, authorization, federation, and cloud-native identity integrations.
• Implement modern identity security controls, including Multi-Factor Authentication (MFA), Conditional Access, Identity Protection, Privileged Identity Management (PIM), Access Reviews, Entitlement Management, and Single Sign-On (SSO).
• Design and support secure authentication and federation architectures using SAML, OAuth 2.0, OpenID Connect (OIDC), and FIDO2 standards for secure access across cloud and SaaS platforms.
• Manage cloud identity and access controls across AWS and Azure, including IAM roles, policies, federated access, workload identities, managed identities, service principals, cross-account access, and least-privilege enforcement.
• Lead governance of enterprise applications and privileged access, including Azure Enterprise Applications, App Registrations, Service Principals, AWS IAM Roles, secrets management, and privileged account controls.
• Drive IAM governance, compliance, and risk management through access certifications, role-based access control (RBAC), segregation of duties (SoD), audit readiness, and regulatory compliance initiatives.
• Manage identity security technologies and supporting infrastructure, including Azure Key Vault, AWS Secrets Manager, HashiCorp Vault, certificate lifecycle management, and machine and workload identities.
• Implement and support cloud-native identity architectures, including Microsoft Entra Workload Identities, Azure Managed Identities, AWS IAM Roles, and federated access patterns to eliminate reliance on long-lived credentials.
• Collaborate with Cloud, Security, Infrastructure, and Compliance teams to advance Zero Trust adoption, strengthen identity security posture, remediate IAM-related findings, and support secure cloud transformation initiatives.
Required Qualifications
• Experience designing, implementing, and managing enterprise IAM solutions across Microsoft Entra ID, Azure, and AWS.
• Strong knowledge of Microsoft Entra ID and cloud identity services, including identity lifecycle management, authentication, authorization, federation, and cloud-native integrations.
• Experience implementing MFA, Conditional Access, Identity Protection, PIM, Access Reviews, Entitlement Management, and SSO.
• Experience with authentication and federation protocols, including SAML, OAuth 2.0, OIDC, and FIDO2.
• Experience managing AWS and Azure IAM roles, policies, federated access, workload identities, managed identities, service principals, and cross-account access.
• Knowledge of enterprise application governance, App Registrations, Service Principals, privileged access controls, and secrets management.
• Understanding of IAM governance, RBAC, segregation of duties, access certifications, audit readiness, and regulatory compliance.
• Experience with Azure Key Vault, AWS Secrets Manager, HashiCorp Vault, certificate lifecycle management, and machine or workload identities.
• Knowledge of cloud-native identity architectures and federated access patterns that minimize reliance on long-lived credentials.
• Ability to collaborate with cloud, security, infrastructure, and compliance teams to improve identity security and support secure cloud initiatives.
Preferred Qualifications
• Microsoft Certified: Identity and Access Administrator Associate (SC-300).
• Microsoft Certified: Azure Security Engineer Associate (AZ-500).
• Microsoft Certified: Cybersecurity Architect Expert (SC-100).
• AWS Certified Security - Specialty.
• AWS Certified Advanced Networking - Specialty.
• Certified Identity and Access Manager (CIAM) or an equivalent IAM certification.
Mandatory Areas
Must Have Skills
Skill 1 - Design, implement, and manage enterprise Identity & Access Management (IAM) solutions across Microsoft Entra ID, Azure, and AWS, ensuring secure, scalable, and resilient identity services.
Skill 2 - Implement modern identity security controls including Multi-Factor Authentication (MFA), Conditional Access, Identity Protection, Privileged Identity Management (PIM), Access Reviews, Entitlement Management, and Single Sign-On (SSO).
Skill 3 - Lead governance of enterprise applications and privileged access, including Azure Enterprise Applications, App Registrations, Service Principals, AWS IAM Roles, Secrets Management, and privileged account controls.
Good To have Skills -
Skill 1 - Partner with Cloud, Security, Infrastructure, and Compliance teams to advance Zero Trust adoption
Mandatory if Applicable
Domain Experience (If any) - Microsoft Azure + Entra and AWS Cloud IAM
Toolkit Management
Must have Certifications - NA
Location - Austin, TX/Remote
Onsite Requirement - Yes
Number of days onsite - 5 Days/NA
