Cloud Security Engineer (Identity & Access Management)

Requirements:

8 Years of experience on Azure

Design and Development

Responsibilities:

• Integrated Azure-hosted applications with enterprise IAM platforms including Okta (SSO/MFA) Active Directory SailPoint (IGA) and CyberArk (PAM) to strengthen authentication authorization and access governance.
  
• Conducted IAM integration assessments requirements gathering and gap analysis to identify remediation activities and support compliance readiness initiatives.
  
• Deployed and managed Azure infrastructure using Terraform and ARM Templates ensuring consistent scalable and automated cloud provisioning.
  
• Configured and administered Azure AD RBAC Conditional Access Policies and PIM to enforce secure access controls.
  
• Implemented and governed Azure environments through Management Groups Subscriptions Azure Policies and Resource Hierarchy aligned with enterprise governance standards.
  
• Collaborated with IAM Security and Application teams to onboard business-critical applications to centralized SSO MFA Identity Governance and Privileged Access Management solutions.
  
• Integrated Azure resources with Active Directory and Okta to enable secure federation identity synchronization and seamless user access experiences.
  
• Supported SailPoint Identity Governance processes including user lifecycle management access reviews role-based provisioning and compliance reporting.
  
• Implemented CyberArk PAM controls for privileged account onboarding credential management and least-privilege access enforcement across cloud environments.
  
• Established cloud security guardrails for Cloud Azure Security Center NSGs Azure Firewall and Private Endpoints to protect enterprise workloads.
  
• Developed and maintained Azure DevOps CI/CD pipelines to automate infrastructure deployment configuration management and environment standardization.
  
• Monitored and optimized Azure environments using Azure Monitor Log Analytics and alerting solutions ensuring operational stability security compliance and cost efficiency.