Senior Cloud IAM Engineer for NATO with security clearance

Would you like to join the leading international intergovernmental organization?

This position seeks a highly skilled Senior Cloud IAM Engineer to architect, secure, and optimize the identity fabric that powers enterprise and mission-critical cloud portfolios. The role moves beyond routine administration to become the subject matter expert on a hybrid identity landscape, bridging the gap between Microsoft Entra ID and AWS IAM Identity Center.

Responsibilities:

• Design, implement, and maintain complex identity and access management architectures in support of enterprise and mission-facing services.

• Develop and manage automation solutions that support identity lifecycle management, provisioning, deprovisioning, access reviews, and operational efficiency.

• Administer and support high volumes of identity objects, roles, groups, and access assignments across Microsoft Entra ID and AWS IAM Identity Center.

• Support and deliver identity provider integrations for web applications and portals, ensuring secure authentication, federation, and MFA-enabled access.

Essential Qualifications & Experience:

• At least 5 years of hands-on experience with Microsoft Entra ID (formerly Azure Active Directory), including identity governance, authentication methods, conditional access, and application integration.

• Strong practical experience with AWS IAM and IAM Identity Center, including role-based access control, federation, and access lifecycle management across cloud environments.

• Demonstrated expertise in automation and orchestration using tools such as Azure Logic Apps, Power Automate, Azure Automation, Azure Functions, AWS Lambda, and PowerShell to streamline identity and access management processes.

• Proven experience integrating identity providers with web applications, portals, and external-facing services, including support for modern authentication and multi-factor authentication requirements.

• Solid architectural knowledge of complex IAM designs, including multi-tenant, hybrid, and cross-domain identity solutions.

• Experience with identity synchronisation and federation across multiple tenants, directories, or domains, with an understanding of secure and scalable enterprise identity patterns.

If you've read the description and feel this role is a great match, we'd love to hear from you! Click "Apply for this job" to be directed to a brief questionnaire. It should only take a few moments to complete, and we'll be in touch promptly if your experience aligns with our needs.