VP, Cloud IAM Engineering Leader

Synchrony

. Lead design, engineering, testing, deployment, and lifecycle management of IAM access configurations and automation for AWS, Azure, and GCP .

Posted 11/10/2026full-timeUnited StatesSenior💰 $135,000 - $230,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in IAM access configurations and automation across AWS, Azure, and GCP, with a strong focus on security principles, least privilege controls, and compliance with regulatory standards. Proven ability to lead technical teams, manage cloud IAM engineering products, and drive continuous improvement in access management processes.

Highest-signal resume keywords

IAM EngineeringAWS IAMAzure RBACGCP IAM ControlsInfrastructure as Code

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Python DevelopmentTerraform AutomationCloud Authorization ConceptsIGA PrinciplesCI/CD PracticesPolicy TestingAccess ModelsOperational ReadinessRisk MitigationPrivilege Escalation Prevention

Soft Skills

Technical LeadershipCommunication SkillsMentoringCollaborationProblem-Solving

Tools & Technologies

OktaSailPoint IdentityIQMicrosoft Active DirectoryCloud-Native Identity ServicesSAFe Agile

Industry Keywords

Identity and Access ManagementCloud SecurityPlatform EngineeringNIST SP 800-53CIS Benchmarks

Tech Stack

Tools & technologies

AWSAzureCloudGoogle Cloud PlatformPythonTerraform

About the role

Key responsibilities & impact

Lead design, engineering, testing, deployment, and lifecycle management of IAM access configurations and automation for AWS, Azure, and GCP
Own the holistic cloud IAM engineering product, including access models, platform configurations, processes, integrations, automation, documentation, operational readiness, control effectiveness, and continuous improvement
Establish and enforce secure access patterns that prevent privilege escalation, reduce standing privilege, separate administrative duties, and apply least privilege
Provide technical direction for AWS IAM, Azure RBAC and privileged access, and GCP IAM controls
Lead reusable Infrastructure as Code and automation using Terraform and Python through controlled DevOps pipelines
Define engineering guardrails, policy testing, peer review, approvals, logging, drift detection, exception handling, and rollback practices
Translate cloud access strategy, security requirements, and risk priorities into engineering roadmaps and controls with the Cloud IAM Leader
Serve as Product Owner within a SAFe Agile Release Train, managing backlog, features, stories, acceptance criteria, PI Planning, and delivered outcomes
Balance new capabilities, platform enablement, remediation, technical debt, operational resilience, and break-fix work
Coordinate identity integrations involving Okta, SailPoint IdentityIQ, Active Directory, cloud-native identity services, and enterprise teams
Apply IGA knowledge to access requests, approvals, provisioning, modifications, certifications, deprovisioning, and evidence processes
Guide authentication and authorization integrations using SAML, OAuth 2.0, and OpenID Connect
Ensure cloud access configurations meet regulatory, audit, and internal-control requirements
Lead troubleshooting of authentication, authorization, provisioning, and cloud-permissions issues
Define engineering metrics and product outcomes for delivery, policy quality, excessive-access reduction, automation coverage, compliance, and reliability
Collaborate with Cloud Security Architecture, cloud platform, Cyber Defense, Technology Risk, application, and other stakeholder teams
Communicate technical risks, design decisions, priorities, dependencies, and outcomes to teams and senior stakeholders
Mentor engineers and foster secure development, ownership, automation, and continuous learning
Manage IAM configuration compliance and remediation SLAs against Synchrony standards, NIST SP 800-53, and CIS Benchmarks
Provide program status updates and remove impediments affecting the Cloud IAM Engineering team
Serve as people manager for the team, including coaching, development, performance management, workforce planning, and engagement
Evaluate cloud and cloud-hosted application RBAC architectures for security and least privilege
Build relationships across technology leadership and perform other assigned responsibilities

Requirements

What you’ll need

Bachelor Degree and 8+ years of experience in identity and access management, cloud security, platform engineering, security engineering, or a related technology field; or, in lieu of Degree, a High School Diploma/GED and 11+ years of experience in those fields
3+ years of technical leadership experience
Engineering experience with IAM capabilities in at least two major cloud platforms, with ability to lead across AWS, Azure, and GCP
Strong knowledge of cloud authorization concepts, including roles, policies, resource permissions, workload identities, cross-account or cross-project access, conditional controls, and privileged access
Ability to identify and mitigate privilege-escalation paths and excessive access while implementing least-privilege controls
Hands-on Python and Terraform development and automation experience, including code review, testing, version control, and CI/CD practices
Working knowledge of Okta, SailPoint IdentityIQ, and Microsoft Active Directory
Strong understanding of IGA principles and processes
Experience in Agile delivery environments and Product Owner responsibilities; SAFe, Agile Release Trains, PI Planning, feature decomposition, backlog prioritization, and acceptance criteria required
Ability to evaluate complex security and engineering issues, make risk-informed decisions, and drive implementation and operational stabilization
Excellent written and verbal communication skills
Must be 18 years or older
Must have a high school diploma or equivalent
Must be willing to take a drug test, submit to a background investigation, and submit fingerprints
Must satisfy Section 19 of the Federal Deposit Insurance Act
Legal authorization to work in the U.S. required; employment visa sponsorship is not available

Benefits

Comp & perks

Annual bonus based on individual and company performance
Option to work from home near one of Synchrony's Hubs or work from an office
Inclusive culture and Employee Resource Groups (ERGs)
Reasonable accommodation for applicants and employees with disabilities