Ability to design scalable permission models across cloud platforms, including: • Cloud‑native roles and permission sets • Least‑privilege and separation‑of‑duties enforcement • Human and non‑human identities (workloads, service accounts) • Permission Design & Access Modeling Deep understanding of permission structures, including: • Role‑based (RBAC) and attribute‑based (ABAC) access models • IAM‑governed access roles and entitlement cataloging • Temporary, just‑in‑time, and break‑glass access patterns • Ability to design access models that reduce audit scope, review volume, and operational risk. • Coding & Scripting Skills Hands‑on coding experience to support IAM automation and integrations, including: • Python or equivalent scripting languages • Use of APIs and SDKs to manage identities, roles, and entitlements • Automation via IaC tools (e.g., Terraform‑based IAM definitions) • Ability to build reusable, auditable, and scalable IAM automation components • Privileged Access & Cloud Governance • Experience designing and governing privileged access across cloud platforms.