Cloud Cybersecurity Engineer - IAM

The Basics:

The Cloud Cybersecurity (CCS) Engineer (IAM) will collaborate with Detection, Security, and Software Engineers to build, operate, and defend Tanium Cloud's Identity and Access Management (IAM) in Tanium’s Cloud Service Providers (e.g. AWS and Azure). You will be an integral part of the Tanium R&D security team, responsible for enabling Tanium personnel to support Tanium Cloud while implementing and operating strong identity and access controls.

What you'll do:

• Operate Identity and Access Management (IAM) in Azure, AWS, and Kubernetes using Tanium Cloud’s infrastructure-as-code and policy-as-code.


• Contribute to the implementation of Tanium Cloud’s IAM strategy and controls in collaboration with Security and Software Engineering teams to enable just-in-time and just-enough access.


• Assess the effectiveness and appropriateness of existing policies and permissions and make recommendations to continuously improve Tanium Cloud’s IAM controls.


• Author, test, deploy, and audit the efficacy of AWS IAM policies and Azure Conditional Access Policies tailored to Tanium Cloud to implement strong security controls.


• Support Tanium employees needing assistance with access to Tanium Cloud’s environment.


• Stay up to date with the latest IAM security threats, vulnerabilities, and industry trends to proactively enhance security prevention and detection measures.


• Build, cultivate, and maintain positive relationships with internal customers to identify and facilitate solutions to increase the impact of the team's work.

We're looking for someone with:

Education:

• Bachelor's degree or equivalent experience


• Cloud Security, IT Security, or related technical field preferred

Experience

• 3+ years of experience working in security focused roles


• 1+ year of experience with AWS, Azure, or Kubernetes


• Knowledge of cloud-based Identity and Access Management concepts, including AWS Organizations, AWS IAM, AWS Service Control Policies, Azure Entra ID (Entra and Subscription Level RBAC), Azure MyApps, and Azure Policies.


• Hands-on experience using infrastructure-as-code (e.g. Terraform, CloudFormation)


• Familiarity with SAML2, OAuth2, and OIDC for Single Sign On (SSO) with federated identity access brokers (i.e. MyApps, Cognito, KeyCloak).


• Excellent collaboration and communication skills to support the design and implementation of new IAM constructs.


• Experience with modern software development and automation tools like Git and Github Actions


• Experience in at least one modern programming language (e.g., Python, Go, JS, etc.)

Other

• Robust analytical and problem-solving capabilities


• Deliver high quality PRs daily using modern software engineering development and automation tools like Git and CI/CD pipelines (e.g. GitHub Actions)


• Relentless desire to automate the mundane to focus on solving the harder problems


• Ability to put out fires under pressure when things go wrong in production environments and identify and address the root causes of those fires for the future


• Versatility to learn new tools and languages

About Tanium

Tanium delivers the industry's only true real-time cloud-based endpoint management and security offering. Its platform is real-time, seamless, and autonomous, allowing security-conscious organizations to break down silos between IT and Security operations that results in reduced complexity, cost, and risk. Securing more than 32M endpoints around the world, Tanium's customers include Fortune 100 organizations, top US retailers, top US commercial banks, and branches of the U.S. Military. It also partners with the world's biggest technology companies, system integrators, and managed service providers to help customers realize the full potential of their IT investments. Tanium has been named to the Forbes Cloud 100 list for nine consecutive years and ranks on the Fortune 100 Best Companies to Work For. For more information on The Power of Certainty™, visit and follow us on LinkedIn and X .

On a mission. Together.

At Tanium, we are stewards of a culture that emphasizes the importance of collaboration, respect, and diversity. In our pursuit of revolutionizing the way some of the largest enterprises and governments in the world solve their most difficult IT challenges, we are strengthened by our unique perspectives and by our collective actions.

We are an organization with stakeholders around the world and it’s imperative that the diversity of our customers and communities is reflected internally in our team members. We strive to create a diverse and inclusive environment where everyone feels they have opportunities to succeed and grow because we know that only together can we do great things.

Taking care of our team members

Each of our team members has 5 days set aside as volunteer time off (VTO) to contribute to the communities they live in and give back to the causes they care about most.

What you’ll get

The annual base salary range for this full-time position is $100,000 to $295,000. This range is an estimate for what Tanium will pay a new hire. The actual annual base salary offered may be adjusted based on a variety of factors, including but not limited to, location, education, skills, training, and experience.

In addition to an annual base salary, team members will receive equity awards and a generous benefits package consisting of medical, dental and vision plan, family planning benefits, health savings account, flexible spending account, transportation savings account, 401(k) retirement savings plan with company match, life, accident and disability coverage, business travel accident insurance, employee assistance programs, disability insurance, and other well-being benefits.

For more information on how Tanium processes your personal data, please see our .