Collaborate with cross-functional cloud teams in Citi including security, infrastructure, service engineering and business application teams to define and implement IAM roles and policies required to build, support and consume services in public cloud.
Define and develop preventive guardrails, detective controls, and automated alerts and remediation to ensure IAM implementation in all cloud environments are compliant with Citi’s cloud security standards and policies.
Build automation software to enable self-service access requests and remediation for over privileged or unused access.
Define SDLC for IAM roles and policies and develop IAM CI/CD pipeline with automated testing and validation.
Define governance process and develop tools for managing cloud IAM inventory and entitlement review.
Serve as a technology subject matter expert for internal and external stakeholders and provide direction for all firm mandated controls and compliance initiatives, all projects within the group and in creating a technology domain roadmap

3
5 years of relevant experience in an Engineering role
Experience in the design and implementation of enterprise software solutions involving cross functional collaboration.
Proficiency in Python, Java and Terraform
Expertise in architecture and solution development for AWS, GCP or Azure
Experience with modern DevOps and agile methodologies and automated solution delivery and testing through CI/CD pipelines
Experience with Identity and Access Management and directory services is a plus
Ability to work independently, multi-task, and take ownership of various parts of a project or initiative
Ability to work under pressure and manage to tight deadlines or unexpected changes in expectations or requirements.

medical, dental & vision coverage
401(k)
life, accident, and disability insurance
wellness programs
paid time off packages, including planned time off (vacation), unplanned time off (sick leave), and paid holidays

Cloud Security Engineer, Assistant Vice President

Key skills