security engineer in cloud security

XpertDirect's client is an Identity Security company based in Dublin that secures authentication and communication for workloads, services, APIs, containers, and automation across cloud-native environments.

• Design and implement identity controls for workloads, services, APIs, and automation;
• Secure workload identities across Kubernetes environments;
• Build and manage authentication and authorisation patterns using OAuth 2.0 / OIDC;
• Strengthen AWS IAM roles, policies, and machine-to-machine access;
• Implement secrets and credential management using Vault;
• Work with PKI, certificates, and service authentication;
• Reduce reliance on long-lived credentials and static secrets;
• Automate identity infrastructure and policies using Terraform;
• Design secure service-to-service authentication patterns;
• Improve credential rotation, certificate lifecycle, and secrets management;
• Partner with Platform and Security teams to embed machine identity into cloud infrastructure by default.

• 4+ Years in IAM, Cloud Security, Platform Security, DevSecOps, or similar roles;
• IAM and identity security;
• AWS IAM;
• Kubernetes;
• OAuth 2.0 / OpenID Connect;
• HashiCorp Vault or comparable secrets-management technology;
• PKI and certificate-based authentication;
• Terraform;
• Strong understanding of cloud-native security;
• Nice to have: Kubernetes workload identity, SPIFFE / SPIRE, mTLS, service meshes, AWS IAM Roles for Service Accounts (IRSA), short-lived credentials / dynamic secrets, certificate lifecycle automation, Zero Trust architecture, policy-as-code, Kubernetes Operators, Go or Python, experience securing large numbers of non-human identities.

• Remote work is available across the European Union.