Cloud Security & IAM Specialist

Cloud Security & IAM Specialist Executive role based in Plano, Texas; works closely with the Information Security Manager to deliver cloud security and IAM services. Role Responsibilities Identify, review, and recommend cloud security leading practices; obtain and review industry‑recognized periodical bulletins regarding cloud security. Utilize native cloud security solutions or third‑party solutions (CSPM, CNAPP, CIEM, CASB) to secure the cloud environment and individual applications. Utilize native cloud SIEM or integrate cloud monitoring events into SIEM or other operational solutions. Monitor cloud network security based on best‑practice and recommended standards and customer’s security standards. Maintain familiarity with modern cloud network architectures such as Software Defined Networking (SDN), virtual private clouds (VNETs), and Security Groups. Maintain virtual private cloud network segregation (separate VNETs, VPCs, and subnets for production and non‑production). Monitor cloud VPN gateway; ensure external connections use secure connectivity methods (e.g., IPSEC tunnels) and block unnecessary or unapproved ports and protocols for cloud workloads. Manage multi‑factor authentication used for resource access to the cloud console and management network. Monitor firewall/security group configurations. Detect and ensure cloud‑hosted data is encrypted as required. Monitor the security posture of the cloud supplier’s DNS/routing configurations and cloud resources. Continuously assess cloud network configurations against regulatory and organizational standards (CIS, NIST) and generate automated audit‑ready reports. Monitor and secure administrative level and root account privileges: Enable and enforce multi‑factor authentication. Assist with AD integration and support Azure RBAC and conditional access for privileged accounts. Adhere to cloud best practice standards for access key management, rotation, and secure storage. Ensure cloud‑hosted resources have appropriate security rules for required ports and protocols. Manage and administer cloud environment role provisioning and de‑provisioning based on least‑privilege and need‑to‑know principles. Cloud Account Management: Create, modify, delete accounts; associate and de‑associate cloud service resources within defined tenants; collect and validate all asset information for customer cloud accounts; utilize public cloud services to manage and maintain account standardization and compliance throughout the lifecycle of an account. Cloud Services Identity and Access Management (IAM) – manage identity and access to grant end users appropriate service use and deny unauthorized access. Define, implement, and operate access management protocols, tools, and processes that enable access rights and identities to be established, controlled, authorized, administered, reported, and audited in adherence with the Identity Management Policy standards. Develop best‑practice policies, including least‑privilege access, strong authentication mechanisms, role‑based access control (RBAC), and other access controls. Develop policies on privacy protection and protective security for access to data, including data and records management and electronic records. Conduct periodic access reviews, detect procedure violations, and generate audit‑ready reports for regulatory standards like ISO 27001, SOC 2, and GDPR. User Management – control user access to cloud resources, implement strong authentication methods, monitor user activities, and ensure compliance with security policies and regulatory requirements. Cloud VM and Storage Security – monitor VM and storage encryption requirements; oversee OS, container, and workload hardening to meet the CIS Level 1 security standard; monitor resilience and recovery of cloud workloads for backup management, scheduling, and retention. Cloud Security Posture Management – manage cloud security posture management platform and capabilities: Support administration of the CSPM platform, including access control, software updates, and vendor support coordination. Manage and monitor vulnerability detection of cloud workloads and services (CVE and security misconfigurations). Assist with prioritization, escalation, and management of alerts and detections. Integrate with Security Operations Center and SIEM platform. Support and monitor identity and entitlement management functionalities. Integrate CSPM tool into SASE tool stack and cloud environment. Basic Requirements 6+ years of cloud security experience. Additional Preferences Knowledge of risk management concepts. Knowledge of systems and network administration (desktop, server). Familiarity with information security technologies and issues on multiple platforms. Knowledge of globally accepted information security principles. Knowledge of network security that pertains to communications and computer system environments. Knowledge of server and desktop configurations that protect systems from unauthorized access and software intrusion. Preferred certifications: CISSP, GIAC, SSCP, or CEH. EEO Statement NTT DATA is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or protected veteran status. For Pay Transparency information, please note that pay ranges are available and are determined by the position's location, function, and experience level. #J-18808-Ljbffr NTT DATA