Cloud Security IAM Engineer

The IAM Security Engineer is a cloud-focused security role responsible for defining and implementing Identity and Access Management roles, policies, and security controls across AWS and GCP environments fort the client. The role involves building self-service automation for developers and delivering IAM solutions through CI/CD pipelines in compliance with the client's internal security standards.

• Collaborate with cross-functional cloud teams, including security, infrastructure, service engineering, and business application teams, to define and implement IAM roles and policies required to build, support, and consume services in public cloud environments.
• Define and develop security controls, standards, and tooling to ensure IAM implementations in public cloud environments align with cloud security requirements and policy.
• Build automation, reusable libraries, and self-service capabilities that enable developers to create IAM identities and manage permissions efficiently and securely.
• Deliver IAM solutions through CI/CD pipelines, incorporating automated testing, validation, and quality checks to support secure and consistent deployments.
• Partner with engineering and platform teams to strengthen cloud identity governance, improve operational efficiency, and reduce manual access management processes.
• Support the design and implementation of scalable IAM solutions that meet enterprise security, compliance, and business requirements in cloud-first environments.
• Troubleshoot and resolve IAM-related issues across cloud platforms, ensuring timely delivery and strong stakeholder communication.
• Contribute to continuous improvement of cloud security engineering practices through automation, standardization, and secure-by-design principles.

The successful candidate would possess these skills:

• Effective written and verbal communication skills
• Meticulous attention to detail and quality of work product
• Ability to build and sustain professional relationships
• Ability to lead projects or workstreams
• Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
• Strong interpersonal skills and professional demeanor
• Ability to meet deadlines
• Ability to provide clear guidance to others

• 3+ years of hands-on experience working with cloud-native services in AWS or GCP.
• 3+ years of experience designing and implementing enterprise security solutions in Financial Services or a large, complex, and/or global environment.
• 3+ years of experience working with infrastructure as code tools such as Terraform and CloudFormation.
• 3+ years of proficiency in programming languages such as Python, Go, or Java.
• 3+ years of experience developing and securing SOAP and REST-based web service APIs.
• 3+ years of experience working with DevOps and Agile methodologies, including automated solution delivery and testing through CI/CD pipelines.
• 3+ years of experience with unit testing frameworks such as Behave, pytest, or JUnit.
• Bachelor's degree, preferably in Computer Science, Information Technology, Computer Engineering, or related IT discipline; or equivalent experience
• Limited immigration sponsorship may be available
• Ability to travel 10%, on average, based on the work you do and the clients and industries/sectors you serve
• Must be able to start by 9/28/2026
• Must be able to work in a Hybrid model - minimum of 3 days onsite at the client location in Dallas, TX.

• Relevant certifications such as CISSP, AWS Certified Security Specialty, or Google Professional Cloud Security Engineer.
• Strong self-starter mindset with the ability to collaborate effectively across technical and business teams.
• Experience building automation to improve security controls, developer experience, and identity governance in cloud environments.
• Analytical/ Decision Making Responsibilities
• Analytical ability to manage multiple projects and prioritize tasks into manageable work products
• Can operate independently or with minimum supervision
• Excellent Written and Communication Skills
• Ability to deliver technical demonstrations

The wage range for this role considers the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $99,900 to $124,900.

Deloitte is committed to providing reasonable accommodations for people with disabilities. If you require a reasonable accommodation to participate in the recruiting process, please direct your inquiries to the Global Call Center (GCC) at USTalentCICInbox@deloitte.com.