Cloud Security Engineer

We’re looking for a Cloud Security Engineer (IAM) to join our ETS Control and Governance team at MBPS. In this role, you are expected to define and maintain a standard access model for cloud resources, review and approve access requests every day within the committed SLA. You will enhance existing automation to make the review and approval task more efficient. Furthermore, you will drive remediation of deviations from the standard access model. Position Responsibilities: Define and communicate the standard access model for various access levels to resources in the Public Cloud service. Own the intake channels including SNOW Process and IaC Pipelines. Manage access authorization for public cloud resources. Perform access review and approval on a daily basis with the committed SLAs. Develop/enhance automation for intake, review, and implementation. Monitor assignment of privileged roles on a daily basis. Discover and remediate deviations from approved access model in the existing environment. Maintain an exception process and tracks temporary elevation of privileges. Required Qualifications: Bachelor’s degree in IT, Computer Science, or related field. 2–4 years of experience in cloud security, identity and access management , or DevOps engineering . Strong understanding of cloud platforms (especially Azure) and DevOps tools such as Terraform, GitHub, GitHub Actions, Python, JIRA, and Confluence. Nice to have: Security-first mindset with working knowledge of RBAC , ABAC , Least Privilege , and Just-in-Time Access principles. Proven experience in building or maintaining automation pipelines for cloud governance. Comfortable working independently and collaboratively in a global team environment. Excellent communication skills in English, both verbal and written. Familiarity with Access Standard Frameworks is considered a nice-to-have , not a requirement. Amenable to work in UP Ayala Technohub (Quezon City) Amenable to work in a hybrid set-up (3x a week onsite) Amenable to work in a fixed mid/night shift schedule Preferred Qualifications: Self-driven, able to meet objectives with a minimal amount of managerial oversight/supervision. A team player who can interact with various internal functions such as business unit security officers, security engineers, reliability engineers, DevOps engineers. Advocate constant learning from both success and failure, and encourages openness to change and continuous improvement Proficient in English, both verbal and written When you join our team: We’ll empower you to learn and grow the career you want. We’ll recognize and support you in a flexible environment where well-being and inclusion are more than just words. As part of our global team, we’ll support you in shaping the future you want to see. About Manulife and John Hancock Manulife Financial Corporation is a leading international financial services provider, helping people make their decisions easier and lives better. Manulife is an Equal Opportunity Employer We strive to attract, develop and retain a workforce that is as diverse as the customers we serve and to foster an inclusive work environment that embraces the strength of cultures and individuals. We are committed to fair recruitment, retention, advancement and compensation, and we administer all of our practices and programs without discrimination on the basis of race, ancestry, place of origin, colour, ethnic origin, citizenship, religion or religious beliefs, creed, sex (including pregnancy and pregnancy-related conditions), sexual orientation, genetic characteristics, veteran status, gender identity, gender expression, age, marital status, family status, disability, or any other ground protected by applicable law. To request a reasonable accommodation in the application process, contact Working Arrangement Hybrid #J-18808-Ljbffr