Cloud IAM Security Engineer
Aflac
Location: Remote - US only
Job Type: Full time
Posted
Job Summary
Responsible for integrations and implementations of identity and access requirements within Aflac’s cloud environments. This role will have the unique opportunity to support building out a multi-cloud environment. This position will work across various functional areas to develop highly consumable, enterprise class capabilities for teams adopting cloud, with a specific emphasis on infrastructure as code, automation and highly integrated security and will perform operational tasks to implement, integrate and automate identity and access management in the cloud.
Principal Duties & Responsibilities
- Provide advisement, designs, integrations and automation for cloud environments (Azure, AWS) and SaaS/PaaS solutions
- Identify gaps or potential enhancements in existing Cloud IAM security practices and provide participant in company initiatives to address them
- Develop and utilize deployment and process automation capabilities (scripts, applications, platforms, APIs) to ensure processes are defined, repeatable, scalable, and able to be disseminated for wider utilization
- Develop integrations and automation to verify and validate deployed resources meet requirements through automated methods
- Contribute to documentation (e.g. RACI diagrams, IAM architectural diagrams, Roles/Rights matrices) that fully captures technical Cloud IAM baselines and operational capabilities to provide guidance operations for our cloud environments
- Understand CI/CD methodologies and integrate IAM security into current pipelines for automation, feedback, validation and logging
- Performs other related duties as required
Education & Experience Required
- Bachelor's Degree in Computer Science, Information Technology, Cyber Security or other related field
- Four or more years of implementing solutions on cloud platforms
- Experience managing Cloud IAM, federated identities and IAM for SaaS solutions
Education & Experience Preferred
- Certfication CompTIA Cloud+, SANS GPCS, AWS Security Specialty/AWS sysops administrator associate, Microsoft Azure Security Technologies AZ-500
Or an equivalent combination of education and experience
Job Knowledge & Skills
- Identity and Access Management
- Cloud Identity and Access Management
- User access authorization concepts
- Certificates
- Privileged Access Management
- Multifactor Authentication
- Single SignOn
- Identity Federation
- Active Directory and RACF
- Networks (TCP/IP)
- Schematic Architecture Design
- Cloud Security and User Administration
- Cloud Security Maintenance
- Cloud Security Policies and Procedures
- Cloud Security Testing and Auditing
- CI/CD Pipeline Methodologies
- Cloud Automation/Integrations Methodologies
Competencies
- Acting with Integrity
- Communicating Effectively
- Pursuing Self-Development
- Serving Customers
- Supporting Change
- Supporting Organizational Goals
- Working with Diverse Populations