<strong>About us</strong><br><br><p style="margin: 0px;">One team. Global challenges. Infinite opportunities. At Viasat, we’re on a mission to deliver connections with the capacity to change the world. For more than 35 years, Viasat has helped shape how consumers, businesses, governments and militaries around the globe communicate. We’re looking for people who think big, act fearlessly, and create an inclusive environment that drives positive impact to join our team.</p> <br><strong>What you'll do</strong><br><br><div><p style="margin: 0px;">We have a great opportunity for an IAM Cloud Engineer to join our Government team! You will design, build, and operate identity capabilities that secure Viasat’s cloud infrastructure, ensuring consistent, scalable access control across AWS, Azure, GCP, and enterprise systems. As an IAM Cloud Engineer, you will play a critical role in aligning identity with cloud architecture, enabling secure access to infrastructure while supporting business and engineering teams.</p><p style="margin: 0px;"> </p><p style="margin: 0px;">In this role, you will partner with cloud, security, and platform teams to implement identity controls that protect cloud resources, reduce risk, and enable scalable, automated access! Your work will directly strengthen Viasat’s cloud security posture and ensure identity services operate as reliable infrastructure supporting critical systems.</p></div><p> </p><p style="margin: 0px;"> </p> <br><strong>The day-to-day</strong><br><br><ul><li>Design and manage cloud identity and access models across AWS, Azure, and/or GCP (roles, policies, RBAC)<br>Implement and maintain identity controls for cloud infrastructure, including least‑privilege access and role design</li><li>Align enterprise IAM (e.g., Entra ID, Okta) with cloud-native identity systems</li><li>Develop and maintain automation for cloud identity lifecycle (e.g., role provisioning, service identities, entitlement management)</li><li>Manage and secure non-human identities, including service accounts, workload identities, and access tokens</li><li>Partner with cloud infrastructure teams to embed identity into platform design and provisioning workflows</li><li>Monitor and solve identity-related issues impacting cloud platforms and infrastructure access</li><li>Contribute to implementation of Zero Trust, conditional access, and identity-based security controls in cloud environments</li><li>Identify and remediate overprivileged access and misconfigurations across cloud environments</li><li>Collaborate with IAM Administrators to transition repeatable tasks into automated, cloud-native workflows</li></ul> <br><strong>What you'll need</strong><br><br><ul><li>4+ years of experience in cloud engineering, or security engineering</li><li>Hands-on experience with cloud IAM (AWS IAM, Azure RBAC, GCP IAM)</li><li>Strong understanding of cloud infrastructure concepts and how identity controls access to resources</li><li>Experience designing and managing roles, policies, and permission models in cloud environments</li><li>Experience with identity federation and authentication protocols (SAML, OAuth, OIDC)</li><li>Experience with scripting or automation (Python, PowerShell, Terraform, or similar)</li><li>Understanding of least privilege, RBAC/ABAC, and identity lifecycle concepts</li><li>Ability to troubleshoot complex access and authentication issues in distributed environments</li><li>US Citizenship required.</li><li><div><div><div><div><p id="root_11906_field28421">Must be able to obtain a United States Secret Clearance</p></div></div></div></div><div> </div></li></ul> <br><strong>What will help you on the job</strong><br><br><div><ul><li>Experience integrating enterprise IAM platforms (Entra ID, Okta) with cloud environments</li><li>Familiarity with Infrastructure as Code (Terraform, CloudFormation, Bicep) and identity-driven provisioning</li><li>Experience managing non-human identities (service accounts, workload identity, secrets management)</li><li>Exposure to cloud security practices (CSPM, CIEM, identity threat detection)</li><li>Experience implementing Zero Trust or conditional access strategies in cloud-first environments</li><li>Familiarity with logging, monitoring, and observability tools for identity activity</li><li>Experience supporting compliance and audit requirements in cloud environments (SOX, SOC2, ISO)</li><li>Strong collaboration skills with cloud engineering, security, and platform teams</li></ul><p>#LI-VSAT </p></div> <br><strong> Salary range</strong><br><br>$165,000.00 - $260,500.00 / annually. For specific work locations within San Jose, the San Francisco Bay area and New York City metropolitan area, the base pay range for this role is $205,000.00- $307,000.00/ annually <br><br><br><br>At Viasat, we consider many factors when it comes to compensation, including the scope of the position as well as your background and experience. Base pay may vary depending on job-related knowledge, skills, and experience. Additional cash or stock incentives may be provided as part of the compensation package, in addition to a range of medical, financial, and/or other benefits, dependent on the position offered. Learn more about Viasat’s comprehensive benefit offerings that are focused on your holistic health and wellness at https://careers.viasat.com/benefits. <br><strong> EEO Statement</strong><br><br><p style="margin: 0px;">Viasat is proud to be an equal opportunity employer, seeking to create a welcoming and diverse environment. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, ancestry, physical or mental disability, medical condition, marital status, genetics, age, or veteran status or any other applicable legally protected status or characteristic. If you would like to request an accommodation on the basis of disability for completing this on-line application, please click <a href="mailto:careers@viasat.com" target="_blank" rel="noopener">here</a>.</p><p style="margin: 0px;"> </p>