Cloud IAM Engineer

Summary

Seeking a highly motivated Cloud IAM Engineer with 3-5 years of hands-on experience in Identity and Access Management (IAM) across public cloud platforms including Microsoft Azure (Entra ID), AWS, and Google Cloud Platform (GCP). The ideal candidate will be responsible for designing, implementing, automating, and supporting cloud-native identity and access management services, ensuring secure access to cloud resources while maintaining compliance with enterprise security standards.

Key Responsibilities

• Design, implement, and support IAM solutions across Azure, AWS, and GCP environments.
• Manage Microsoft Entra ID, AWS IAM, IAM Identity Center, and GCP IAM services.
• Implement and maintain RBAC, ABAC, least privilege, and privileged access controls.
• Configure and manage Conditional Access policies, Identity Protection, and Zero Trust controls.
• Deploy and support MFA, passwordless authentication, and adaptive authentication solutions.
• Integrate enterprise and cloud applications using SAML, OAuth 2.0, OpenID Connect (OIDC), and SCIM.
• Manage service principals, managed identities, workload identities, and non-human accounts.
• Automate IAM processes using PowerShell, Python, REST APIs, and Infrastructure-as-Code tools.
• Collaborate with Cloud Security and DevOps teams to integrate IAM controls into CI/CD pipelines.
• Perform access reviews, entitlement governance, and policy compliance activities.
• Monitor cloud identity risks and remediate excessive permissions and security findings.
• Support security audits, compliance requirements, and identity governance initiatives.
• Develop technical documentation, standards, and operational runbooks.

Required Skills

• 3-5 years of hands-on experience in Cloud IAM, Identity Security, or Access Management.
• Strong experience with Microsoft Entra ID (Azure AD), AWS IAM, and GCP IAM.
• Expertise in RBAC, ABAC, entitlement management, and least privilege access models.
• Experience implementing Conditional Access, MFA, Identity Protection, and Zero Trust controls.
• Strong understanding of SAML, OAuth 2.0, OpenID Connect (OIDC), and SCIM.
• Experience with service accounts, service principals, managed identities, and workload identities.
• Proficiency in PowerShell, Python, Bash, or similar scripting languages.
• Experience with Terraform, Git, CI/CD pipelines, and DevOps practices.
• Knowledge of cloud security best practices and compliance frameworks.
• Strong troubleshooting, analytical, and problem-solving skills.
• Excellent communication and stakeholder management abilities.

## Qualifications

### Education:

Bachelor's Degree

### Skills

### Certifications:

### Languages:

### Years of Experience:

2 - 4 Years

### Work Experience:

## Additional Information

###

### Shift:

Day (India)

###

### Travel:

Yes, 10% of the Time

###

### Relocation Eligible:

No

### Referral Payment Plan:

None

Applied Materials is an Equal Opportunity Employer committed to diversity in the workplace. All qualified applicants will receive consideration for employment without regard to race, color, national origin, citizenship, ancestry, religion, creed, sex, sexual orientation, gender identity, age, disability, veteran or military status, or any other basis prohibited by law.