Principal Identity Cloud Security Engineer

$126,000 - $171,000/Yr

AIG - Dallas, TX

Full-time - Principal

Dallas, TX

1,001-5,000 employees

Insurance Carriers and Related Activities

About the position

The Principal Identity Cloud Security Engineer at AIG is responsible for designing, implementing, and maintaining identity solutions within cloud environments. This role focuses on building security infrastructure and automation between security tools, ensuring compliance with regulatory requirements, and protecting sensitive data and systems. The position requires a strong background in public cloud technologies and a proactive approach to security management.

Responsibilities

• Design, implement, and maintain identity solutions in cloud environments, including AWS, Entra/Azure, and GCP.
• Establish and enforce IAM policies, standards, and procedures to ensure compliance with regulatory requirements and best practices.
• Configure and manage identity providers to the cloud, including SSO and related identity protection configurations.
• Perform access reviews and risk assessments to identify and mitigate identity-related security vulnerabilities.
• Automate IAM processes and workflows to improve efficiency and quality while reducing manual effort.
• Reduce risk through least privilege access, using CSPM and CIEM solutions to identify risk and drive remediation efficiently and effectively.
• Develop and implement secure onboarding processes for new cloud accounts, users, and resources across AWS, Azure, and other cloud platforms in compliance with federal regulations and security standards.
• Provision and configure cloud security services including logging, config management, threat detection, and security monitoring for continuous protection.
• Implement and enforce security controls to protect sensitive data and systems.
• Collaborate with cross-functional teams to ensure secure integration of applications and services into the cloud environments.
• Respond to security incidents, investigate root causes, and implement remediation measures to prevent future occurrences.
• Document and maintain comprehensive security policies, procedures, and configurations for cloud environments.

Requirements

• Bachelor's degree in Cybersecurity, Information Technology, or related field; Master's degree preferred.
• 10+ years in Information Security or Information Technology as an engineer including 7+ in cloud security.
• Hands-on experience with IAM solutions, such as AWS IAM/Identity Center, Microsoft Entra ID (formerly Azure AD).
• Demonstrated proficiency with deploying cloud resources such as EC2, S3, Lambda Functions.
• Expert understanding of core networking concepts including TCP/IP, VPN, and Layer 7.
• Proficiency with cloud identity access management technologies, protocols, and implementations such as conditional access policies, SCIM/SAML integrations, SSO, MFA.
• Extensive experience with creating and managing AWS Policies, AWS Service Control Policies, and Azure Role Based Access Controls.
• Hands-on experience with agile and DevOps methodologies such as GitHub repositories, code pipelines, and actions.
• Demonstrated experience with scripting languages such as Python, PowerShell, and Infrastructure as Code (IAC) Terraform and CloudFormation.
• Strong understanding of cloud architecture principles, including IaaS, PaaS, and SaaS.
• Experience with CSPM and CIEM solutions, such as Palo Alto Prisma Cloud.
• Problem-solving mindset with a focus on delivering secure solutions.
• Self-starter who is proactive, motivated, and resourceful individual who takes ownership of their work, embraces challenges, and consistently strives for excellence.
• Ability to think strategically and drive business outcomes.
• Relevant certifications, such as CISSP, CISM, or other cloud security certification are a plus.
• Excellent written and verbal communication skills.

Nice-to-haves

• Experience with automation tools and frameworks for security management.
• Familiarity with compliance frameworks such as NIST, ISO 27001, or similar.

Benefits

• Health insurance
• Comprehensive benefits package focusing on health, wellbeing, and financial security.