IAM Engineer AWS Security

Role: IAM Engineer - AWS Security

Location: Remote (Preferred: Raleigh, NC)

Role Overview

We are seeking an experienced IAM Engineer with deep expertise in AWS security services, Identity and Access Management (IAM), and cloud compliance frameworks. This role will own and strengthen the security posture of the AWS platform, implement preventive guardrails, and ensure continuous compliance through automation.

Key Responsibilities

• Own and maintain the overall AWS security posture, ensuring alignment with industry compliance standards

• Design, implement, and manage IAM policies, SCPs, and security controls across multiple AWS accounts

• Configure and manage AWS security services including:

  • AWS Config

  • GuardDuty

  • Security Hub

  • Macie

  • KMS (Key Management Service)

• Automate security controls and evidence collection for compliance frameworks such as:

  • PCI DSS

  • SOC 2

  • ISO 27001

• Perform security reviews, identify gaps, and drive remediation activities

• Collaborate with platform, DevOps, and compliance teams to enforce secure cloud architecture

Required Skills (Must-Have)

• AWS Security Services: Strong hands-on experience with AWS native security tools

• IAM: Deep expertise in IAM roles, policies, permission boundaries, SCPs

• Encryption & Key Management: KMS, PKI concepts, encryption at rest and in transit

• Compliance Frameworks: Practical experience supporting audits and regulatory requirements

• Infrastructure as Code: Terraform for security automation and policy enforcement

• Security Tooling: Experience with tools such as Qualys (or similar vulnerability scanners)

Preferred / Nice-to-Have Skills

• Experience with Cloud Control Matrix (CCM)

• Exposure to multi-account AWS environments and landing zone architectures

• Strong documentation and audit-readiness mindset

• Experience working in regulated or enterprise cloud environments