Cloud Infrastructure Engineer

Responsibilities

• Design, build, and operate secure, scalable cloud infrastructure and identity platforms in AWS and our own data centers.
• Implement and manage IAM, IGA, authentication, authorization, SSO, MFA, identity lifecycle management, and provisioning/deprovisioning solutions using modern identity platforms and standards such as SAML, OAuth2, OIDC, and SCIM.
• Develop automation, integrations, and infrastructure-as-code solutions using Terraform and programming languages such as Python and Go.
• Design and implement security controls for AI-powered systems, including controlled, audited, and governed agent workflows, while contributing to core security services such as service identity, secrets management, key management, authentication, and authorization.
• Partner with Security and Engineering teams to deliver secure-by-design solutions, implement Zero Trust principles, and reduce operational friction.
• Write high-quality, reliable code, participate in architecture and code reviews, support critical production systems, and drive operational excellence through scalability, resiliency, and automation.
• Be part of oncall and incident response of Dev Productivity org.

Skills & Qualifications

• 5+ years of experience in Cloud Infrastructure, Identity & Access Management (IAM), Identity Engineering, or Security Engineering.
• Strong knowledge of authentication, authorization, identity lifecycle management, and federation protocols including SAML, OAuth2, OIDC, SCIM, and RBAC.
• Experience designing and operating identity and access controls within AWS environments, with experience building and operating production level services on AWS.
• Experience working with container technology.
• Experience deploying and operating services on Kubernetes.
• Strong automation and coding skills with Python, Go, Terraform, or similar technologies.
• A security-first mindset with experience implementing Zero Trust, least-privilege access, and compliance frameworks such as SOC2, FedRAMP, or ITAR.
• An product and operational mindset with experience supporting and improving production level services through monitoring, troubleshooting, incident response, and automation.
• Excellent collaboration and communication skills, with a proven ability to drive projects and influence technical decisions across teams.

Preferred Skills & Qualifications

• Hands-on experience with any Identity platforms - Okta, Microsoft Entra ID (Azure AD), and modern IAM/IGA platforms.
• Experiences with Azure and/or GCP is a bonus.