Insight Global is seeking a Senior Cloud Engineer specializing in Identity and Access Management (IAM) to design, implement, and operate secure, scalable identity solutions across a modern cloud environment. This role sits at the intersection of cloud engineering, security, and DevOps, with a strong focus on Microsoft Azure and modern identity standards.

The successful candidate will partner closely with Security, Infrastructure, Application, and Business teams to ensure identity, authentication, authorization, and privileged access are implemented in a way that is secure, compliant, and seamless for the business. This role is critical to supporting a retail and eCommerce-driven environment, while also enabling adjacent domains including supply chain, manufacturing, and shared services.

Key Responsibilities

Identity & Access Management Engineering

• Design, implement, and maintain IAM solutions using modern identity standards, including SAML, OAuth2, and OpenID Connect (OIDC), for both internal and external applications.
• Configure and manage Role-Based Access Control (RBAC) and Privileged Access Management (PAM) to enforce least-privilege access across cloud resources.
• Implement and manage Conditional Access policies, MFA strategies, and identity protection controls within Azure AD / Entra ID.
• Oversee user, group, and entitlement lifecycle management in alignment with security, compliance, and audit requirements.

Cloud Engineering & Automation

• Build, support, and operate IAM-related cloud infrastructure and integrations, primarily in Microsoft Azure (AWS experience is a strong plus).
• Develop automation using Azure Automation, Logic Apps, scripting, and Infrastructure as Code (IaC) to reduce manual effort and operational risk.
• Support cloud-based Windows, Linux, and SQL environments where identity integrations and access controls are required.
• Partner with DevOps and application teams to embed identity and security controls into CI/CD pipelines and deployment workflows.

Security, Compliance & Operations

• Apply IAM and cloud security best practices to protect enterprise systems, applications, and data.
• Participate in security reviews, audits, and risk assessments related to identity and access controls.
• Troubleshoot complex identity-related incidents, performing root cause analysis and implementing long-term corrective actions.

Required Skills & Experience

• Bachelor’s degree or diploma in Computer Science, Information Technology, or Cybersecurity (or equivalent hands-on industry experience).
• 8+ years of experience in Cloud Engineering, and/or Security, with significant hands-on IAM ownership.
• Strong, demonstrable experience with Microsoft Azure (AWS experience is an asset).
• Deep understanding of identity and access management principles, authentication and authorization models, and cloud security best practices.
• Hands-on experience with:
• SAML, OAuth2, OpenID Connect (OIDC)
• RBAC and Privileged Access Management (PAM)
• Conditional Access policies
• Azure Automation and Logic Apps
• User and group lifecycle management
• Experience supporting retail or eCommerce environments; exposure to manufacturing, logistics, supply chain, or shared corporate services is a plus.
• Strong experience working in JIRA and Confluence within agile or DevOps-oriented teams.
• Proven ability to quickly learn, adapt, and apply emerging cloud, security, and IAM technologies.

Nice to Have

• AWS IAM or multi-cloud identity experience
• Azure certifications (AZ-104, AZ-305, SC-300, or similar)
• Experience integrating IAM with SaaS platforms and custom applications
• Exposure to Zero Trust architecture and identity governance solutions