IAM & Cloud Security Engineer

Description

• Manage B2B/B2C federation for suppliers, partners, and cross-region collaboration.
• Design, implement, and manage IAM systems across Microsoft Entra ID (Azure AD), Active Directory, and AWS IAM.
• Prepare documentation, evidence, and remediation plans for internal audits and external assessments.
• Partner with global teams to address compliance risks in manufacturing and data processing operations.
• Conduct entitlement reviews, automate provisioning/deprovisioning, and drive identity governance initiatives.
• Enforce secure lifecycle management, RBAC/ABAC models, and Just-In-Time (JIT) access controls.
• Integrate enterprise applications and industrial platforms with Entra ID or AWS Cognito using SAML, OIDC, OAuth2.0, and WS-Federation.
• Implement secure configuration baselines using Azure Policy, AWS Config, Cloud Custodian, and other compliance-as-code tools.
• Serve as a subject matter expert in incidents involving IAM or cloud services.
• Collaborate with IT, OT, DevOps, and business stakeholders to align cloud and identity architectures with enterprise risk posture.
• Lead or support initiatives ensuring adherence to: NIST (800-53, CSF), ISO 27001/27002, GDPR, CSL.
• Support global data protection strategies including access logging, consent tracking, and data retention policies.
• Deploy and manage MFA, SSO, conditional access, and PAM across IT and manufacturing environments.
• Continuously assess and remediate misconfigurations to ensure alignment with: NIST 800-53, CIS Benchmarks, ISO 27001/27002, GDPR, and CSL requirements.
• Monitor cloud environments using Azure Security Center, Defender for Cloud, AWS Security Hub, CloudTrail, and related services.

Requirements

• China’s Cybersecurity Law (CSL)
• NIST 800-53
• Proficient with:
• AWS IAM, Organizations, SCPs, and related services
• Strong analytical, communication, and documentation skills
• Strong experience implementing compliance and configuration controls in alignment with:
• Microsoft Certified: Identity and Access Administrator Associate
• AWS Certified Security – Specialty
• Microsoft Entra ID (Azure AD) and Active Directory
• ISO 27001/27002
• Familiarity with Chinese data compliance, data localization practices, or multi-national supply chain requirements is highly desirable
• Identity federation protocols and SSO technologies
• Bachelor’s degree in Cybersecurity, Information Systems, Engineering, or related field (or equivalent experience).
• Minimum of 12 years of experience in cybersecurity, with direct experience in IAM and cloud security across hybrid enterprise environments.
• Infrastructure-as-Code (IaC) tools like Terraform, CloudFormation, or ARM templates
• Azure Security Engineer Associate
• Ability to operationalize cloud and compliance policies across diverse technical stacks
• CISSP, CISM, or CRISC
• Comfortable working with stakeholders across geographies, especially in highly regulated markets (e.g., EU, China, U.S.)
• Expert knowledge of IAM strategy and security architecture in global manufacturing environments
• ISO 27001 Lead Implementer

Benefits

Training + Development

Interview process

Visa Sponsorship

Security clearance