CI
Enterprise Cloud IAM Consultant
Cardinal Integrated Technologies Inc
- 🇺🇸 United States
- On-site
- 3 hours ago
- IAM
- Azure
- AWS
- Conditional Access
- Identity Management
- AWS IAM
- Secrets Management
- Zero Trust
- Entra
- AWS Cloud
- SAML
- OpenID Connect
- OIDC
- Risk Management
- RBAC
- Regulatory Compliance
- Key Vault
3 hours ago
Location – Austin, TX/Remote
Onsite Requirement – Yes
Number of days onsite – 5 Days/NA
Must Have Skills
Skill 1 – Design, implement, and manage enterprise Identity & Access Management (IAM) solutions across Microsoft Entra ID, Azure, and AWS, ensuring secure, scalable, and resilient identity services.
Skill 2 – Implement modern identity security controls including Multi-Factor Authentication (MFA), Conditional Access, Identity Protection, Privileged Identity Management (PIM), Access Reviews, Entitlement Management, and Single Sign-On (SSO).
Skill 3 – Lead governance of enterprise applications and privileged access, including Azure Enterprise Applications, App Registrations, Service Principals, AWS IAM Roles, Secrets Management, and privileged account controls.
Good To have Skills –
Skill 1 – Partner with Cloud, Security, Infrastructure, and Compliance teams to advance Zero Trust adoption
Domain Experience (If any) – Microsoft Azure + Entra and AWS Cloud IAM
Job Responsibilities
1. Design, implement, and manage enterprise Identity & Access Management (IAM) solutions across Microsoft Entra ID, Azure, and AWS, ensuring secure, scalable, and resilient identity services.
2. Serve as the Subject Matter Expert (SME) for Microsoft Entra ID and Cloud Identity Services, managing identity lifecycle, authentication, authorization, federation, and cloud-native identity integrations.
3. Implement modern identity security controls including Multi-Factor Authentication (MFA), Conditional Access, Identity Protection, Privileged Identity Management (PIM), Access Reviews, Entitlement Management, and Single Sign-On (SSO).
4. Design and support secure authentication and federation architectures using SAML, OAuth 2.0, OpenID Connect (OIDC), and FIDO2 standards to enable secure access across cloud and SaaS platforms.
5. Manage cloud identity and access controls across AWS and Azure, including IAM roles, policies, federated access, workload identities, managed identities, service principals, cross-account access, and least-privilege enforcement.
6. Lead governance of enterprise applications and privileged access, including Azure Enterprise Applications, App Registrations, Service Principals, AWS IAM Roles, Secrets Management, and privileged account controls.
7. Drive IAM governance, compliance, and risk management through access certifications, role-based access control (RBAC), segregation of duties (SoD), audit readiness, and regulatory compliance initiatives.
8. Manage identity security technologies and supporting infrastructure, including Azure Key Vault, AWS Secrets Manager, HashiCorp Vault, certificate lifecycle management, and machine/workload identities.
9. Implement and support cloud-native identity architectures, including Microsoft Entra Workload Identities, Azure Managed Identities, AWS IAM Roles, and federated access patterns to eliminate reliance on long-lived credentials.
10. Partner with Cloud, Security, Infrastructure, and Compliance teams to advance Zero Trust adoption, strengthen identity security posture, remediate IAM-related findings, and support secure cloud transformation initiatives.
________________________________________
Preferred Certifications
One or more of the following certifications are preferred:
• Microsoft Certified: Identity and Access Administrator Associate (SC-300)
• Microsoft Certified: Azure Security Engineer Associate (AZ-500)
• Microsoft Certified: Cybersecurity Architect Expert (SC-100)
• AWS Certified Security – Specialty
• AWS Certified Advanced Networking – Specialty (preferred)
• Certified Identity and Access Manager (CIAM) or equivalent IAM certification
Enterprise Cloud IAM Consultant · Cardinal Integrated Technologies Inc