Tech Stack
AWSAzureCloudGoogle Cloud PlatformGrafanaPython
About the role
- Provision, modify, and revoke user accounts across applications, cloud services, and internal platforms.
- Manage role-based access control (RBAC), SSO, MFA, and Identity Federation using tools such as Azure AD, Keycloak, and Google Workspace.
- Regularly audit access permissions to ensure compliance with security policies and regulatory standards.
- Identify and fix security-related issues, including unauthorized access or privilege escalation risks.
- Collaborate with security and compliance teams to ensure adherence to frameworks (e.g., ISO, SOC, Vanta).
- Manage access across platforms including cloud services (AWS, GCP, Azure, Digital Ocean, Hetzner, OVHCloud), collaboration tools (Slack, Zoom, Office 365, Google Workspace, Lark, Figma, Creative Cloud), DevOps & development tools (GitLab, AWX, Postman, BrowserStack, Cursor, Qase), security & monitoring (Cloudflare, Grafana, BitDefender, Mosyle, Sentry, Vanta, Qualys), and productivity apps (Staff Timer, ShutterStock, MouseFlow, Intercom, HubSpot, Zendesk, Stripe, LinkedIn Sales Navigator).
- Act as the first point of contact for access-related incidents and escalations; investigate and resolve login, permission, and authentication issues.
- Coordinate with IT, DevOps, and Security teams for timely resolution of access incidents.
- Implement automation for provisioning/de-provisioning (GitLab CI/CD, AWX, or scripting) and continuously improve access workflows to reduce manual interventions.
- Manage licenses and subscriptions for access-controlled applications and collaborate with vendors (Twilio/SendGrid, Telesign, Apple/Google Developer Accounts).
Requirements
- Bachelor’s degree in Computer Science, Information Security, or related field.
- 3–5 years of experience in IT administration, Identity & Access Management (IAM), or related roles.
- Strong knowledge of SSO, MFA, IAM protocols (SAML, OAuth, OpenID Connect).
- Hands-on experience with Azure AD, Keycloak, Okta (or similar).
- Familiarity with cloud platforms (AWS, GCP, Azure) and DevOps tools.
- Working knowledge of security compliance frameworks and auditing.
- Excellent troubleshooting and problem-solving skills.
- Strong communication and documentation abilities.
- Preferred: Experience with automation scripting (Python, Bash, PowerShell).
- Preferred: Knowledge of Zero Trust security models.
- Preferred: Exposure to enterprise compliance tools like Vanta, Qualys.
- Preferred: Prior experience in managing global SaaS applications and licenses.