Cloud Identity & Access Management Engineer

Matrix USA is a global technical consultancy specializing in technology services, seeking an experienced Cloud professional with deep expertise in Identity and Access Management (IAM) across major cloud platforms. The role involves coordinating IAM configurations, maintaining cloud identity environments, and collaborating with engineering teams on deployments.

Responsibilities:

• Coordinate execution and deployment of IAM configuration across Azure AD, Azure Compute, Office 365, AWS, GCP, and various SaaS platforms
• Maintain configuration accuracy and version currency for the Azure AD Connect Sync Service
• Monitor, validate, and act on Microsoft Message Center alerts to ensure proper maintenance of the cloud identity environment
• Participate in the IAM intake queue, evaluating and processing requests related to cloud configuration changes, application integrations, and IAM tasks
• Collaborate with Cloud IAM Engineering teams on project-related changes and deployments
• Respond to identity-related security alerts and events across cloud environments
• Serve as an escalation point for IAM operations personnel when required

Requirements:

• 5+ years of professional IT experience, with 3+ years focused on cloud-based IAM or cloud engineering
• Ability to work effectively in a fast-paced, cloud-centric environment and within Scrum/Agile processes
• Strong academic foundation in computer science, information technology, or a related discipline
• Microsoft Azure platform experience, including hands-on configuration and administration
• In-depth knowledge of core Azure IAM technologies, including: Azure AD Connect, Conditional Access, MFA, Directory Roles, Azure PIM, Subscription RBAC, and Access Policies for major services
• Working knowledge of: Authentication & authorization protocols (SAML, OAuth, OIDC, NTLM, Kerberos, Basic)
• Azure capabilities such as Azure Policy & Blueprints, Graph API, ARM, Azure AD Health, Azure Security Center
• IAM integration and management within AWS
• IAM configuration and identity services in Google Cloud Identity
• CI/CD frameworks and DevOps toolchains for orchestration, automated configuration, and containerized environments (e.g., Jenkins, SALT, Kubernetes, Docker)
• Scripting and automation using Azure CLI, PowerShell, and/or Python
• Preference for candidates holding relevant cloud certifications (Azure, AWS, or GCP)
• Experience with Active Directory, ActiveRoles Server, or federation services is highly beneficial