VP, Cloud IAM Lead Engineer

Job Description:

Role Summary/Purpose:

The VP, Cloud IAM Lead Engineer will be a team member supporting the design, engineering, and delivery of AWS IAM solutions for the strategic modernization & transformation of Synchrony’s AWS Public Cloud platform.  Lead engineers will typically support all areas within the function, while also leading a particular subject-matter (ie: automation, governance, security, etc.) or stakeholder relationship.  This role will work across organizational boundaries to understand the technology ecosystem and deliver innovative solutions to enable and scale access to cloud services.

We’re proud to offer you choice and flexibility. At Synchrony, our way of working allows you to have the option to work from home, near one of our Hubs or come into one of our offices. Occasionally you may be required to commute to our nearest office for in person engagement activities such as business or team meetings, training and culture events.

Essential Responsibilities:

• Design, engineer, deploy, and document AWS IAM solutions working closely with application architects & lead engineers, product teams, information security, and risk management functions.
• Deploy robust preventative controls & automation to enhance effectiveness of AWS IAM access controls and minimize the AWS IAM attack surface.
• Establish strong relationships and deeply partner with technology product teams on their journey to develop innovative capabilities for Synchrony using the right solutions, with the right access, at the right time.
• Drive a culture of continuous process improvement, risk management, & operational excellence through metrics and reporting.
• Continuously improve AWS IAM Engineering processes to reduce friction & accelerate the adoption of innovative new cloud technologies for Synchrony at scale.
• Provide deep subject matter expertise for AWS IAM platform services, entities, configuration, and best practices.
• Apply technical knowledge, industry experience, expertise, and insights to contribute to the development & execution of Cloud IAM Engineering capabilities.
• Day-to-day management & maintenance of the Cloud IAM Engineering required to support business requirements, application integrations, workloads, regulatory compliance, and all other platform efforts or deliverables.
• Maintain strong security posture & resiliency through comprehensive compliance and continuous monitoring procedures.
• Collaborate across cross-functional teams to improve and deliver on business objectives and priorities.
• Collaborate with various groups and individuals to troubleshoot and resolve escalated production issues.
• Provide ongoing coaching and mentorship to Cloud IAM Engineers and Junior Cloud IAM engineers to continuously improve the technical knowledge and continuous learning culture across the team.

Qualifications/Requirements:

• BS/BA in Computer Science / other technical degree or Business Management and 7 years of IT experience or in lieu of degree High School Diploma/GED and 10 years of IT experience.
• 5+ years of experience engineering AWS IAM and/or AWS Security solutions.
• 5+ years of experience developing automated solutions using Python scripts, modules, and/or packages for managing AWS configuration. 
• 3+ years of experience in planning, building, & managing AWS IAM Policies, SAML Roles, Cross-Account Roles, Service-Link Roles, and applying access conditions & restrictions.
• 3+ years of experience in the development & operational support of AWS IAM processes, application integrations, vulnerability management, workload support, regulatory compliance, and service delivery/management.
• 2+ years of experience developing Infrastructure-as-Code solutions via Terraform.
• 2+ years of experience in automating deployments via BitBucket/Git and Jenkins following DevOps & CI/CD best practices.
• Strong understanding of identity and access management principles and best practices on AWS.

Desired Characteristics:

• Proven analytical mindset; Ability to identify patterns or correlation within data sets.
• Critical attention to detail; Ability to coordinate multiple deliverables across multiple teams.
• Strong communication, and ability to articulate technical requirements to technical and non-technical stakeholders.
• Strong engineering and architecture skills; especially in information security.
• Experience working with agile methodologies.
• Hands-on experience working across various identity functions including Identity Governance & Administration, Authentication / Authorization, Directory Services, Privilege Management, and Secrets Management.
• Experien