IAM Engineer I

CBTS serves enterprise and midmarket clients in all industries across the United States and Canada. CBTS combines deep technical expertise with a full suite of flexible technology solutions--including Application Modernization, Managed Hybrid Cloud, Cybersecurity, Unified Communications, and Infrastructure solutions. From developing and deploying modern applications and the secure, scalable platforms on which they run, to managing, monitoring, and optimizing their operations, CBTS delivers comprehensive technology solutions for its clients' transformative business initiatives. For more information, please visit www.cbts.com.

OnX is a leading technology solution provider that serves businesses, healthcare organizations, and government agencies across Canada. OnX combines deep technical expertise with a full suite of flexible technology solutions—including Generative AI, Application Modernization, Managed Hybrid Cloud, Cybersecurity, Unified Communications, and Infrastructure solutions. From developing and deploying modern applications and the secure, scalable platforms on which they run, to managing, monitoring, and optimizing their operations, OnX delivers comprehensive technology solutions for its clients’ transformative business initiatives. For more information, please visit www.onx.com.

Iam Engineer I

Job Description:

The IAM Engineer is responsible for deploying and managing IAM resources such as users, groups, roles, and policies using Infrastructure as Code. The IAM Engineer ensures that IAM configurations support business requirements, application integrations, and regulatory compliance. Following process documentation and ensuring IAM compliance are essential for maintaining a secure IAM posture.

Responsibilities:

•  Engineer and deploy IAM resources including users, groups, roles, and policies using Infrastructure as Code and following Cloud IAM team processes and procedures
• Day-to-day delivery of the IAM configuration required to support business requirements, application integrations, workloads, regulatory compliance, and all other platform efforts or deliverables
• Actively monitor and respond accordingly to IAM configuration changes, events, and alerts following applicable CIE team process and proceduresEvaluates existing IAM permission policies and adjust them as needed to enforce principle of least privilege.
• Ensure effective security protection controls and hardening requirements are in place for all IAM resources
• Ensure all IAM resources and configuration adhere to and compliant with all policies/standards, industry best practices/benchmarks, and regulatory requirements
• Participates in Agile team's ceremonies
• Updates assigned Jira stories daily as required by the Agile team to provide status and next steps
• Ensures service requests contain proper approvals and documentation prior to starting the work and deconflicts discrepancies with the CIE Service Management Lead.
• Actively coordinates with the CIE Service Management Lead to resolve conflicting requirements or unclear information in Jira stories or service requests.
• Ensures principle of least privilege is implemented in every template policy prior to creating Pull Requests
• Ensures security controls are implemented in the CFN templates as required to ensure we maintain a secured Cloud IAM posture.
• Lead as needed to ensure same day resolution.
• Troubleshoots errors logged in in the CFN StackSet's Stack Instance or Operations tabs as needed to advance the fulfillment of service requests
• Follows process documentation to ensure proper governance and request to implementation traceability is in place.
• Performs IAM compliance event follow-up and remediation with account owners to resolve event conditions.

Qualifications:

5 to 7 years in related field

Education:

• Four years of College resulting in a Bachelor's Degree or equivalent
• Accreditation / Certification / Licenses:

·       AWS Security Specialty (preferred)

AWS Solutions Architect -- Associate (preferred)

Supervisory Responsibility:

This position does not have any supervisory responsibilities

Work Environment:

Remote or Office Environment

Due to U.S. Government requirements applicable to foreign-owned telecommunications providers, non-US citizens may be required to submit to an extensive government agency background check which will necessitate disclosure of sensitive Personally Identifiable Information.