Azure IAM Architect

Job Description:

We are seeking an Cloud IAM Architect to play a pivotal role in the design and implementation of a new Azure tenant as part of Cyber Resiliency program. Currently we are using AWS and this will be a new environment that will be setup in Azure. We will also at some point of time build in GCP. Having experience in IAM for Azure, AWS and GCP is preferred

Key Responsibilities:

• Design, implement, and manage high level access model for users and systems including architecture Diagram, narratives etc., for accessing new Azure Tenant and GCP tenant

• Implement Systematic provisioning of user access accounting for joiner, Mover and Leaver actions using SailPoint and Okta

• Implementing processes for meeting IAM controls including periodic reporting capabilities on access, reconciliation between SailPoint and Azure and GCP tenants.

• Define and Develop customer RBAC roles for meeting the above controls

• Define Azure policies to enforce IAM controls

• Define and Implement Roles, Policies and IAM controls through CICD pipeline

• Develop documentation, train operational team members and transition the support work to operations team.

Qualifications and Skills:

• Bachelor's Degree in Computer Science or a related field, with relevant Azure, GCP and AWS experience.

• Minimum of 5 years of professional experience in cloud computing and practical experience working with cloud-based services.

• Deep understanding of Azure services, particularly in the context of landing zones, encompassing computing, storage, networking, security, databases, and analytics.

• Proficiency in scripting and programming languages such as Cloud Formation, Python, Terraform and C# for automation and Azure solution development.

• Demonstrated expertise in DevOps practices, including CI/CD pipelines, and adeptness in implementing modern cloud solutions.

• Comprehensive understanding of security practices and compliance standards relevant to Azure.

• Subject matter expertise in constructing Azure landing zones, coupled with a background in designing cloud infrastructure and providing assistance in migrating application workloads to the cloud