About the Company

We are a technology organization building and maintaining secure cloud-based services for modern business operations. Our security strategy emphasizes strong identity verification, controlled access, continuous risk evaluation, and secure integration between applications, infrastructure, and users.

We are seeking an IAM Engineer with expertise in cloud identity and Zero Trust security to strengthen authentication, authorisation, and access controls across our cloud and hybrid environments.

Role Overview

The IAM Engineer will design, implement, and optimise cloud identity controls across enterprise applications, cloud infrastructure, and workforce identities. The position will focus on identity federation, authentication policies, workload identities, conditional access, and secure integration with cloud-native services.

The successful candidate will collaborate with cloud architects, DevOps engineers, application teams, and security specialists to deliver scalable identity solutions that support secure digital operations.

Key Responsibilities

• Design and maintain cloud identity solutions across Microsoft Azure, AWS, Google Cloud, or hybrid environments.
• Configure identity federation, SSO, MFA, and risk-based authentication policies.
• Implement and maintain conditional access controls based on user, device, application, and sign-in risk.
• Manage workload identities, service principals, managed identities, and application registrations.
• Support secure authentication and authorisation for APIs, cloud applications, and internal services.
• Apply Zero Trust principles to identity verification, privileged access, and resource access decisions.
• Review cloud identity permissions and remediate excessive privileges, inactive accounts, and insecure configurations.
• Integrate identity providers with SaaS applications and internal platforms using modern authentication standards.
• Collaborate with DevOps teams to secure service-to-service authentication and secrets management.
• Develop automation for identity configuration, policy deployment, access reviews, and compliance reporting.
• Investigate identity-related incidents, suspicious sign-ins, token misuse, and access policy failures.
• Maintain identity architecture documentation and contribute to cloud security standards and technical controls.

Requirements and Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Cloud Engineering, or equivalent practical experience.
• At least 3 years of experience in IAM, cloud security, identity engineering, or enterprise authentication.
• Hands-on experience with Microsoft Entra ID, AWS IAM, Google Cloud IAM, or comparable identity technologies.
• Strong understanding of SAML 2.0, OAuth 2.0, OpenID Connect, JWTs, and identity federation.
• Experience configuring MFA, conditional access, RBAC, privileged access, and least-privilege policies.
• Familiarity with cloud workloads, service identities, API authentication, and application registrations.
• Scripting or automation experience using PowerShell, Python, Terraform, or similar tools.
• Understanding of Zero Trust architecture and identity-centric security controls.
• Ability to work across engineering and security teams and communicate technical risks clearly.
• Certifications such as Microsoft SC-300, AZ-500, AWS security certifications, or equivalent are an advantage.

What We Offer

• Fully remote work, subject to agreed location and employment eligibility.
• Competitive salary aligned with technical expertise and professional experience.
• Opportunities to design and improve cloud identity and Zero Trust security capabilities.
• Access to modern cloud platforms, automation tools, and security technologies.
• Professional training and support for relevant cloud and identity certifications.
• A collaborative environment with cloud engineering, DevOps, and security teams.
• Paid annual leave and additional benefits in accordance with company policy and applicable employment requirements.

Application Instructions

Candidates should submit an up-to-date CV highlighting cloud IAM experience, identity federation projects, authentication policy configuration, and automation work. Please describe relevant examples of securing cloud identities, improving access controls, or implementing Zero Trust principles without disclosing sensitive information.

Applications will be evaluated based on technical expertise, cloud identity experience, security judgement, and the ability to deliver reliable solutions in a remote working environment.

Are you interested in this position?

Apply by clicking on the “Apply Now” Button below!

#JobsHubEstonia #GlobalRecruitment
#CareerOpportunities #HiringNow
#JobSeekersNetwork #EstoniaJobs
#RecruitmentServices #EmploymentPortal.