AWS IAM Engineer

IAM Engineer

Certifications

AWS Security, AWS Solutions Architect, Cybersecurity certifications highly preferred

Must-Have

810 years in Identity and Access Management and related security domains

5+ years of experience in Cloud IAM Management on AWS (Azure/Google Cloud Platform a plus)

Strong hands-on experience with AWS IAM (roles, policies, federation), Terraform automation, and multi-account deployments

Experience integrating IAM with AWS services (Aurora, EventBridge, MWAA, LakeFormation, Snowflake, DBT, OpenSearch, AWS Transfer Family)

Expertise in designing and automating CI/CD pipelines for IAM and platform services using AWS CodePipeline, Jenkins, and Terraform

Knowledge of security frameworks (NIST CSF, CCM v4, CIS Benchmarks) and regulatory compliance (PCI-DSS, HIPAA, FedRAMP)

Experience with SSO/Federation (SAML, OAuth, FIDO2), MFA, and directory services

Strong scripting skills (Python, PowerShell, bash, AWS SDK) and IaC automation (Terraform, CloudFormation, GitHub)

Subject-matter expertise in Zero Trust, least privilege, defense-in-depth, and secure-by-design principles

Experience in program governance, documentation, and stakeholder management

Ability to prepare architecture diagrams, operational runbooks, and compliance documentation

Direct customer interaction and stakeholder expectations management

Nice-to-Have

CISSP Certification

3+ years with third-party IAM tools (CyberArk, Okta, SailPoint, Entra ID, Ping)

Experience with cloud data services (Snowflake, DBT) and AWS observability tools (CloudWatch)

Key Responsibilities

Design and implement advanced AWS platform services (DevOps, Security, Networking, Identity, Monitoring, Finance, and Data) for enterprise users, aligned with client policies.

Engineer and automate provisioning of services and pilot applications using Terraform, streamlining deployment and operational efficiency.

Integrate and enforce IAM policies and security controls for robust compliance and resource protection.

Establish automated CI/CD pipelines for application and IAM deployments.

Implement program governance frameworks, coordinate with stakeholders, and support documentation, reporting, and UAT.

Develop reusable Terraform modules for AWS services and data platforms, parameterize for multi-account use, and conduct unit testing.

Prepare and maintain comprehensive documentation, including architecture diagrams, compliance validation, and operational runbooks.

Support defect management, deployment reviews, and knowledge transfer sessions.