Sr. Cybersecurity Engineer - IAM

Visa•Austin, TX

1d•Remote

About The Position

The Cybersecurity Engineer – Cloud is responsible for designing, implementing, and operating security controls that protect cloud‑native platforms and workloads across public cloud environments (AWS, Azure, GCP). The role partners closely with engineering, DevOps, and architecture teams to ensure cloud services are secure by design, compliant with regulatory requirements, and resilient at scale. This position combines hands‑on engineering, security architecture, and risk‑based decision‑making within complex, distributed, and regulated environments. In addition to cloud security responsibilities, this role provides security oversight and engineering support for AI‑enabled capabilities used across the Pismo platform. The engineer ensures that adoption of Artificial Intelligence and Large Language Models (LLMs) is aligned with Visa security controls, Pismo data‑protection principles, and global regulatory expectations. This is a remote position. A remote position does not require job duties be performed within proximity of a Visa office location. Remote positions may be required to be present at a Visa office with scheduled notice. Visa requires at least 3 days in office, expectations of these days will be confirmed by your Hiring Manager.

Requirements

6+ years in IAM/security engineering with strong hands-on delivery (not only governance).
Strong knowledge of IAM fundamentals: identity lifecycle, authentication, authorization, MFA, RBAC/ABAC, access reviews.
Demonstrated coding ability and automation mindset: Python/Go preferred; PowerShell/Bash acceptable; experience shipping tools used by others.
Experience implementing enterprise IAM standards and operating in compliance-driven environments (access control evidence, audits, governance).
Solid understanding of segregation of duties and production access constraints.
Multi-cloud security/IAM experience across AWS/Azure/GCP.
Experience with identity providers / governance platforms (e.g., federated SSO patterns, directory groups, access certification workflows).
Experience engineering and/or integrating PAM capabilities and processes (vaulting/rotation, JIT/JEA).
Experience applying GenAI to security operations responsibly (workflow automation, evidence generation, policy templating).

Nice To Haves

Security certifications (nice-to-have): CISSP/CISM, cloud certs, IAM-related certs.

Responsibilities

Designing, implementing, and operating security controls that protect cloud‑native platforms and workloads across public cloud environments (AWS, Azure, GCP).
Partnering closely with engineering, DevOps, and architecture teams to ensure cloud services are secure by design, compliant with regulatory requirements, and resilient at scale.
Providing security oversight and engineering support for AI‑enabled capabilities used across the Pismo platform.
Ensuring that adoption of Artificial Intelligence and Large Language Models (LLMs) is aligned with Visa security controls, Pismo data‑protection principles, and global regulatory expectations.