Who We Are

Applied Materials is the global leader in materials science and engineering solutions that are at the foundation of virtually every new semiconductor chip and advanced display in the world. The equipment that we create and service is essential to advancing AI and accelerating the commercialization of next-generation semiconductor chips. Join us and push the boundaries of materials science and engineering in a company at the foundation of the electronics industry. The work we do together advances the world’s technology. 

What We Offer

Location:

You’ll benefit from a supportive work culture that encourages you to learn, develop, and grow your career as you take on challenges and drive innovative solutions for our customers. We empower our team to push the boundaries of what is possible—while learning every day in a supportive leading global company. Visit our Careers website to learn more. 

At Applied Materials, we care about the health and wellbeing of our employees. We’re committed to providing programs and support that encourage personal and professional growth and care for you at work, at home, or wherever you may go. Learn more about our benefits. 

Summary

Seeking a highly motivated Cloud IAM Engineer with 3-5 years of hands-on experience in Identity and Access Management (IAM) across public cloud platforms including Microsoft Azure (Entra ID), AWS, and Google Cloud Platform (GCP). The ideal candidate will be responsible for designing, implementing, automating, and supporting cloud-native identity and access management services, ensuring secure access to cloud resources while maintaining compliance with enterprise security standards.

Key Responsibilities

• Design, implement, and support IAM solutions across Azure, AWS, and GCP environments.
• Manage Microsoft Entra ID, AWS IAM, IAM Identity Center, and GCP IAM services.
• Implement and maintain RBAC, ABAC, least privilege, and privileged access controls.
• Configure and manage Conditional Access policies, Identity Protection, and Zero Trust controls.
• Deploy and support MFA, passwordless authentication, and adaptive authentication solutions.
• Integrate enterprise and cloud applications using SAML, OAuth 2.0, OpenID Connect (OIDC), and SCIM.
• Manage service principals, managed identities, workload identities, and non-human accounts.
• Automate IAM processes using PowerShell, Python, REST APIs, and Infrastructure-as-Code tools.
• Collaborate with Cloud Security and DevOps teams to integrate IAM controls into CI/CD pipelines.
• Perform access reviews, entitlement governance, and policy compliance activities.
• Monitor cloud identity risks and remediate excessive permissions and security findings.
• Support security audits, compliance requirements, and identity governance initiatives.
• Develop technical documentation, standards, and operational runbooks.

Required Skills

• 3-5 years of hands-on experience in Cloud IAM, Identity Security, or Access Management.
• Strong experience with Microsoft Entra ID (Azure AD), AWS IAM, and GCP IAM.
• Expertise in RBAC, ABAC, entitlement management, and least privilege access models.
• Experience implementing Conditional Access, MFA, Identity Protection, and Zero Trust controls.
• Strong understanding of SAML, OAuth 2.0, OpenID Connect (OIDC), and SCIM.
• Experience with service accounts, service principals, managed identities, and workload identities.
• Proficiency in PowerShell, Python, Bash, or similar scripting languages.
• Experience with Terraform, Git, CI/CD pipelines, and DevOps practices.
• Knowledge of cloud security best practices and compliance frameworks.
• Strong troubleshooting, analytical, and problem-solving skills.
• Excellent communication and stakeholder management abilities.

Additional Information

Time Type:

Employee Type:

Travel:

Relocation Eligible:

Applied Materials is an Equal Opportunity Employer. Qualified applicants will receive consideration for employment without regard to race, color, national origin, citizenship, ancestry, religion, creed, sex, sexual orientation, gender identity, age, disability, veteran or military status, or any other basis prohibited by law.