IAM Engineer at Moniepoint Inc. (Formerly TeamApt Inc.)

IAM Engineers at Moniepoint build secure, automated, and auditable identity workflows across internal platforms and cloud environments. You’ll work with OAuth, API keys, and custom identity systems to enforce fine-grained, role-based access aligned with maker-checker controls, while driving automation for identity provisioning via Terraform.

Key Responsibilities:

• Automate IAM identity lifecycle management (user/service accounts, roles, groups) using Terraform and GitLab pipelines.
• Implement custom OAuth2 and client credential flows for secure internal app authentication.
• Enforce role-based access control and attribute-based access control models, including maker-checker review workflows.
• Design and maintain audit-ready access provisioning systems integrated into CI/CD and runtime.
• Define secure patterns for API key management, secrets rotation, and multi-cloud identity federation.
• Collaborate on enforcement of access policies across Kubernetes clusters and containerized apps.

Requirements:

• 3+ years of experience in IAM, DevSecOps, or security engineering roles.
• Bachelors in computer science or a related field.
• Hands-on with Terraform for IAM automation (AWS IAM, GCP IAM, custom identity stores).
• Deep knowledge of cloud native roles and identity lifecycle management.
• Strong knowledge of OAuth2, OpenID Connect, SSO, and authorization token flows.
• Experience with secrets management systems (e.g., HashiCorp Vault, AWS Secrets Manager).
• Familiarity with policy-as-code tools for access control governance.