Cloud Security Engineer (Identity & Access Management)

Job Title: Cloud Security Engineer (Identity & Access Management)
Location: Missisauga- Hybrid (3 Days Work From Office)

Requirements:

• 8+ Years of experience on Azure

• Design and Development

Responsibilities:

• Integrated Azure-hosted applications with enterprise IAM platforms including Okta (SSO/MFA), Active Directory, SailPoint (IGA), and CyberArk (PAM) to strengthen authentication, authorization, and access governance.
  
• Conducted IAM integration assessments, requirements gathering, and gap analysis to identify remediation activities and support compliance readiness initiatives.
  
• Deployed and managed Azure infrastructure using Terraform and ARM Templates, ensuring consistent, scalable, and automated cloud provisioning.
  
• Configured and administered Azure AD, RBAC, Conditional Access Policies, and PIM to enforce secure access controls.
  
• Implemented and governed Azure environments through Management Groups, Subscriptions, Azure Policies, and Resource Hierarchy aligned with enterprise governance standards.
  
• Collaborated with IAM, Security, and Application teams to onboard business-critical applications to centralized SSO, MFA, Identity Governance, and Privileged Access Management solutions.
  
• Integrated Azure resources with Active Directory and Okta to enable secure federation, identity synchronization, and seamless user access experiences.
  
• Supported SailPoint Identity Governance processes, including user lifecycle management, access reviews, role-based provisioning, and compliance reporting.
  
• Implemented CyberArk PAM controls for privileged account onboarding, credential management, and least-privilege access enforcement across cloud environments.
  
• Established cloud security guardrails for Cloud, Azure Security Center, NSGs, Azure Firewall, and Private Endpoints to protect enterprise workloads.
  
• Developed and maintained Azure DevOps CI/CD pipelines to automate infrastructure deployment, configuration management, and environment standardization.
  
• Monitored and optimized Azure environments using Azure Monitor, Log Analytics, and alerting solutions, ensuring operational stability, security compliance, and cost efficiency.