Cloud Engineer

This is a global, multi-discipline team responsible for architecting and delivering secure, robust, and innovative solutions which would enable the development teams to build and deploy new applications as well as migrate selected existing applications into the public cloud.

The team works with multiple public cloud providers and are presently looking for an experienced Cloud Engineer familiar with various cloud concepts, services, and tools, preferably from multiple public cloud providers but primarily in the Cloud Identity and Access Management (CIAM) space. The candidate will be involved in multiple aspects of the team’s work, including evaluation of new cloud products and services, and integrating them into standard client cloud solutions.

• Providing IAM solutions for migrating existing or integrating new applications in the Client environment across multiple Cloud providers including but not limited to Azure and AWS
• Provide IAM services for complex, multi-tier applications that are migrating to Cloud Platforms
• Selecting appropriate IAM Cloud controls for migrating applications based on given requirements
• Working in a globally distributed team to provide innovative and robust Cloud centric solutions
• Closely working with Vendors to develop and deploy Cloud services to meet customer expectations
• Integrate, configure, document, and deploy compliant infrastructure and supporting services in the Cloud platform
• Design, Optimization and Document the Operational aspects of the Cloud platform
• Troubleshooting problems, resolving root cause, and where possible, fixing the bug(s)
• Collaborate with Risk Management to ensure necessary controls to Cloud services are deployed and tested Skills Required:
• Strong knowledge of Azure AD and related services such as Conditional access, Identity protection, Privileged identity management, etc.
• Strong knowledge of authentication with SAML, OAuth, OpenID, and Kerberos
• Experience in providing Federated Identity with solutions such as PING Federate or ADFS
• Knowledge of the Zero Trust Architecture principles
• Prior experience in providing RBAC solutions for AWS and Azure
• Experience creating technical architecture documentation
• Strong communication and written skills
• Strong scripting and automation abilities including PowerShell and/or Python

Skills Desired:

• Prior experience in the Identity space with a background in Active Directory or similar LDAP stores
• Working knowledge of Azure Active Directory Connect synchronization software or similar technology
• Prior experience using compliance assurance tooling such as Prisma Cloud
• Prior experience with products from HashiCorp such as Terraform, Vault and Consul
• Prior experience with risk control frameworks and engagements with risk and regulatory functions
• Knowledge and experience of working with CI/CD frameworks and methodologies such as automated testing (unit / integration) and release pipelines (e.g. Jenkins, GitHub Actions)
• Experience in the financial industry