Access & Identity Management Engineer, Associate / Atlanta, GA Or Wilmington, DE

BlackRock•Atlanta, GA

2d•$110,000 - $148,000•Hybrid

About The Position

The Access and Identity Management team is part of the Global Information Security group, focused on evaluating and establishing security controls to protect the company’s information and computer systems. The Cloud Identity & Access Management (IAM) Cloud Associate role is a technical position supporting IAM functions in Microsoft Azure and AWS environments. This includes creating and granting access to new users and non-human accounts, while also crafting and maintaining roles, permissions, and entitlements for various businesses and departments within BlackRock. The role also involves proactive governance of cloud environments, including reviewing stale access, handling secret rotations, and reducing over-privileged access.

Requirements

Bachelor's degree in Cyber Security, Computer Science, Information systems or equivalent work experience in the IT field, with at least a portion of that time in Security related position
Minimum of 5+ years of proven experience in Access and Identity Management.
2-4 years of extensive experience working with IAM within Microsoft Azure and Amazon Web Services (AWS) environments.
Hands-on experience with creating, modifying, and maintaining user access via Privileged Identity Management (PIM) in Microsoft Azure.
Proficient in assigning entitlements to roles and groups using Role-Based Access Control (RBAC).
Experience with application registrations and granting required permissions to non-human accounts in the cloud.
Skilled in maintaining access to management groups, subscriptions, resources, and enterprise applications.
Strong understanding of using AWS CLI, IAM users, policies, roles, terraform to deploy resources, and permission boundaries to address complex access requests within AWS.
Demonstrated knowledge of role-based access provisioning, establishing team-based roles, and assigning entitlements.
Proficiency in PowerShell and Python scripting for task automation and efficiency.
Solid grasp of cloud security governance practices and IAM policy/document preparation.
Experience working in a highly regulated and audited Information Security environment.

Nice To Haves

Ability to train other team members on Cloud IAM topics.
Excellent customer service and communication (oral/written) skills with technical and non-technical audiences.
Strong critical thinking and analytical skills with the ability to think “out of the box.”
Good teammate and consensus-forming individual.
Integrity and the highest ethical standards.
Self-starter with a personal aim to achieve superior performance.
Natural curiosity and a desire to always learn.

Responsibilities

Drive continuous improvement within the IAM security architecture by introducing and implementing emerging security technologies and best practices.
Collaborate effectively with business and IT teams to analyze and define IAM requirements.
Liaise with Information Security, Aladdin Engineering, and business functions to deliver the target technology environment.
Create and enhance automation scripts and CI/CD pipelines to implement IAM roles, SPNs, and other IaC configurations in Azure, AWS, and GCP public cloud environments.
Utilize automation tools such as CI/CD pipelines, Azure DevOps, Terraform, and Python scripts for IAM infrastructure setup and capability deployment.
Identify gaps and recommend solutions to enhance operational efficiencies across IAM processes.
Manage user and non-human access through Azure RBAC role assignments via Privileged Identity Management (PIM).
Ensure a comprehensive understanding of onboarding enterprise applications.
Handle IAM users, policies, and roles in AWS.