Security Engineer IAM, PAM, Cloud Security & SOC

WHO ARE WE

We are a smart governance company empowering central and local government decision-makers through dynamic technology solutions that strengthen public administration. We work on large-scale smart governance and digital transformation projects, helping governments improve efficiency, transparency, and service delivery through seamless and cost-effective technology solutions.

To know more about us: www.pixelvide.com

Experience Required

We are looking for a skilled Security Engineer with 4–8 years of overall experience in Cybersecurity, including at least 3 years of hands-on experience in IAM/PAM and 3 years in Cloud Security Monitoring or Incident Response

Key Responsibilities

• Monitor AWS security events using CloudTrail, GuardDuty, Security Hub, WAF, and application logs.
• Implement centralized security logging, alerting, and incident response procedures.
• Investigate suspicious logins, unusual API activity, unauthorized changes, and abnormal database access.
• Establish role-based access controls and centralized identity management with single sign-on where supported.
• Implement phishing-resistant MFA and just-in-time privileged access with approval and expiry.
• Restrict permanent administrator access and manage emergency access procedures.
• Conduct periodic access reviews and monitor privileged and administrative activities.
• Enforce segregation of duties across developers, DBAs, DevOps, and security administrators.
• Coordinate with a managed 24×7 SOC for continuous monitoring and incident response.
• Coordinate incident containment, evidence preservation, recovery, and remediation tracking.
• Review AWS security configurations, identify vulnerabilities, and conduct periodic security drills.
• Maintain incident reports and ensure that no employee can independently control all stages of a sensitive production operation.

Must-Have Skills

• AWS IAM, IAM Identity Center and AWS Organizations
• SSO (Single Sign-On), RBAC and MFA
• PAM Tools, Identity Lifecycle Management and Access Governance
• AWS Security Services, CloudTrail, GuardDuty, Security Hub and WAF
• SIEM, Linux Security, Incident Response and Threat Detection
• Log Analysis

Preferred Qualifications

• AWS Certified Security - Specialty
• GCIH certification or equivalent hands-on security credentials.
• Practical experience managing both IAM/PAM and Cloud Security/SOC operations, preferably in AWS environments.
• Experience with privileged access management, cloud security monitoring and security incident response.