SaaS Security Posture Management (SSPM) Engineer

Phoenix, AZ - OnsiteKey ResponsibilitiesSaaS Security EngineeringDeploy, configure, and operate SSPM platforms to continuously monitor SaaS security posture.Assess SaaS applications for configuration drift, identity risks, excessive permissions, data exposure, and third-party application risks.Establish and maintain SaaS security baselines and remediation workflows.Support SaaS onboarding, certification, and governance processes.Automation & IntegrationBuild automation workflows and integrations between SSPM platforms, IAM, SIEM, ticketing, and governance systems.Develop dashboards, reporting, and metrics to provide visibility into SaaS security posture and compliance.Leverage APIs, scripting, and Infrastructure-as-Code (IaC) to improve operational efficiency and security automation.Cloud & SaaS SecurityPossess knowledge of SaaS integrations with AWS, Google Cloud Platform (GCP), Microsoft Azure, and Oracle Cloud Infrastructure (OCI).Assess identity federation, API connectivity, data protection, logging, and monitoring controls across SaaS and cloud environments.Partner with cloud security teams to ensure consistent control implementation and risk management.Governance & Risk ManagementDocument findings, remediation recommendations, and residual risks.Contribute to SaaS security standards, control frameworks, and secure-by-design guidance.Support risk assessments, exception reviews, and security certification activities.Required Experience & Skills5+ years of experience in Security Engineering, Cloud Security, or SaaS Security.Hands-on experience with one or more SSPM platforms such as:AppOmniObsidianPalo AltoAdaptive ShieldWing SecurityValenceSimilar SSPM technologiesStrong understanding of:SaaS SecurityIdentity and Access Management (IAM)Data ProtectionAPI SecuritySecurity MonitoringExperience with AWS, GCP, Azure, and/or OCI security concepts and controls.Proficiency in:PythonPowerShellAPIsTerraformGitHubAutomation frameworksExperience integrating security tools and building automated workflows.Preferred QualificationsExperience with CASB (Cloud Access Security Broker) technologies and SaaS governance programs.Familiarity with AI/GenAI-enabled SaaS security risks.Relevant certifications such as:CISSP (Certified Information Systems Security Professional)CCSP (Certified Cloud Security Professional)AWS Security SpecialtyGoogle Professional Cloud Security EngineerAzure Security EngineerOCI Security ProfessionalThanks & Regards...Suresh KumarAccounts ManagerGalaxy i Technologies Inc.EMail: Suresh2@galaxyitech.comPh No: 480-696-5394Alt No: 480-992-9904