Lead AWS IAM Security Engineer [Remote]
EPAM Systems, Inc.
New York, NY
- Remote job
We are looking for a specialized Cloud Security Engineer to secure our next-generation multi-region architecture. In this role, you will architect, implement, and automate robust security controls across AWS — spanning enterprise IAM, Public Key Infrastructure (PKI), secrets management, and cloud security posture management (CSPM) — while ensuring strict compliance for PCI-scoped fintech workloads.
Req.#1080529720
Identity & Access Management: Design and enforce secure AWS IAM policies, roles, permission boundaries, Service Control Policies (SCPs), and EKS Pod Identity / IRSA configurations Cloud Detection & Posture Management: Implement and manage security monitoring and posture tools including Amazon GuardDuty, AWS Security Hub, AWS CloudTrail, Macie, and IAM Access Analyzer PKI & Certificate Management: Build and manage automated certificate lifecycle workflows using AWS Private CA (FIPS 140-2 Level 3 HSM-backed), ACM, and mTLS trust stores, coordinating closely with the client's Security approvals Secrets & Encryption: Secure sensitive data using AWS KMS (including Multi-Region Keys), Secrets Manager, and the External Secrets Operator Baseline (Mandatory): Strong hands-on experience with AWS CDK and TypeScript for security-as-code automation AWS PKI & TLS: Deep expertise in AWS Private CA (HSM-backed), ACM, mTLS trust stores, automated certificate issuance/rotation/revocation, and PayPal Security compliance workflows Proficiency with Amazon GuardDuty, Security Hub (AWS FSBP, CIS, NIST benchmarks), Macie, and IAM Access Analyzer Experience supporting strict PCI-scoped fintech audits and CSPM frameworks Identity & Secrets Management: Advanced IAM expertise (roles, trust policies, permission boundaries, SCPs, IRSA/EKS Pod Identity), Secrets Manager, External Secrets Operator, and KMS/MRK envelope encryption Supply Chain & Application Security: SAST tools (SonarQube, CodeQL), Dependabot, and software supply chain security (image signing and provenance via Cosign/SLSA) integrated with CDK & TypeScript Experience with Wiz (CSPM/CNAPP) Advanced deployments of AWS Private CA (PCA) and complex KMS key hierarchiesVacancy posted 5 days ago
Similar jobs that could be interesting for youBased on the Lead AWS IAM Security Engineer [Remote] in New York, NY vacancy
$65k - $102k
...Strong hands-on experience with AWS CDK and TypeScript for security-as-code automation Deep expertise... ...FSBP, CIS, NIST benchmarks, Macie, and IAM Access Analyzer Experience supporting... ...a specialized Cloud Security Engineer to secure our next-generation multi-...Amazon Web ServiceFull timeEPAM Systems
New York, NY3 days ago- ...is looking for an experienced security engineer skilled in detection and... ...posture platforms and native AWS cloud servicesConduct proactive... ...words with your actions while leading by example. Simplicity - Be like... ...(CloudTrail, GuardDuty, IAM, VPC Flow Logs, Lambda, etc.)...Amazon Web ServiceCasual workLocal area
$144.25k - $256.25k
...commitment to back the broader engineering community through open... ...is our Information Security organization, enabling... ..., Cybersecurity IAM Engineering provides leadership... ...colleagues, leading high-performing teams in... ...identity services across AWS, Azure, and GCP, Active...Amazon Web ServiceVisa sponsorship$152k - $258k
...motivated, and focused on engineering excellence. This... ...Engineer to own and scale our security and AI governance... ...from compliance theater.Lead risk assessments and compliance... ...in cloud environments (AWS, GCP, or Azure).Expert-... ...controls (e.g., IAM, logging and monitoring...Amazon Web ServicePermanent employmentTemporary work$152k - $258k
...motivated, and focused on engineering excellence. This... ...Architects and Engineering Leads to bake compliance and... ...issues that represent real security or business risk over... ...of engineering, cloud (AWS/GCP/Azure), and... ...technical controls (e.g., IAM, logging and monitoring...Amazon Web ServicePermanent employmentTemporary work$175k - $220k
...are looking for a highly technical Senior Security Engineer who thrives on building security... ...workflows.Hands-on experience securing AWS, Azure, or GCP environments.Experience with... ...Security, Cloud security, SaaS security, IAM, and Security monitoring technologies.Strong...Amazon Web ServiceFull timeWork at office$163.94k - $215.18k
Hi, we're Oscar. We're hiring a Senior Security AI Engineer 1 to join our Security Engineering... ...More Secure AI Data & Model Lifecycle: Lead the development and implementation of... ...managing cloud security infrastructure (AWS/GCP IAM boundaries).Comfort and fluency with cutting...Amazon Web ServiceFull timeWork at officeFlexible hours- ...abuse spread faster than any security team can respond to. So we built... ...-CTO/founders, and ex-Notion engineers, Outtake is designed for clarity... ...of our cloud infrastructure: AWS, EKS, Vercel, Supabase... ...on secure-by-default patterns: IAM, network segmentation, privilege...Amazon Web ServiceFull timeWork at officeFlexible hours
Out Take
New York, NY1 day ago $100k - $258k
...highly motivated, and focused on engineering excellence. This organization... ...and motivated Infrastructure Security Engineer to join our security... ...multiple cloud platforms (e.g., AWS, GCP, Azure)Build and secure... ...cloud) environments, including IAM and overall security...Amazon Web ServiceTemporary work- ...is one of the world’s leading internet financial platform... ...for:The Circle Security Team works to protect Circle... ...native infrastructure (AWS + EKS), and the AI tooling... ...across AWS + EKS: IAM compromise, identity federation... ...response, or security engineering.3+ years of experience...Amazon Web ServiceContract workWork experience placementFlexible hoursShift workNight shift
- ...dynamic and highly skilled Network Security Engineer to join our team. In this... ...environments like AWS and Google Cloud Platform.... ...across diverse platforms. • Lead incident recovery efforts by... ...identity & access management (IAM), RBAC policies, SSO integrations...Amazon Web ServiceRemote work
3B Staffing LLC
New York, NY2 days ago $149k - $235k
...distributed systems spanning AWS, GCP, and self-managed Kubernetes... ...looking for a Senior Cloud Security Engineer II to join our Security... ...patterns other engineers build on, lead cross-team security... ...systems Drive control-plane and IAM security strategy across AWS...Amazon Web ServiceWork at officeLocal areaFlexible hoursBraze
New York, NY1 day ago- ...Description Job Description Senior Security Engineer Full Time Opportunity 5 days on site... ...tightening and configuring relevant Amazon AWS and Microsoft Azure services Perform... ...assessment of NACLs, Security Groups, IAM, S3, KMS, and other core AWS infrastructure...Amazon Web ServiceFull time
Enterprise Engineering
New York, NY6 days ago - ...Hinge Health is seeking a Lead Security Engineer to develop security practices for AI-assisted healthcare solutions. This role requires expertise in cloud security and IAM, with a focus on AWS environments. The successful candidate will audit security frameworks and implement...Amazon Web Service
Hinge Health
New York, NY4 days ago - ...Information Security EngineerWe are seeking an Information Security Engineer to support enterprise IAM platforms, including both vendor solutions such as CyberArk and internally... ...Active Directory, Windows/Linux administration, and cloud (AWS/Azure) IAM integrations....Amazon Web Service
Veracity
New York, NY4 days ago $165k - $242k
...with confidence. Trusted by leading AI labs, startups, and global... ...at .What You’ll DoAs a Cloud Security Engineer at CoreWeave, you'll drive the... ...public cloud platforms (e.g., AWS, Azure, GCP)Lead the design,... ...including primitives such as IAM, detection and monitoring, configuration...Amazon Web ServicePermanent employmentFull timeTemporary workCasual workWork at officeFlexible hours$160k - $220k
...most sensitive matters. Security for us is a strategic... ...We’re hiring a senior engineer to own the security, scalability... ...cost efficiency of our AWS environment. The... ...least-privilege IAM across services Implement... ...key segmentation Lead threat modeling across...Amazon Web ServiceWork at officePointOne
New York, NY25 days ago$180k - $240k
...Information Security Engineer Where Medicine Meets Intelligence Doctronic is the first AI legally authorized to practice medicine... ...equivalent compliance frameworks ~ Familiarity with AWS security controls, IAM, encryption, and cloud security best practices ~...Amazon Web ServiceFlexible hoursDoctronic
New York, NY4 days ago$237.6k - $297k
We are seeking a highly technical Security Engineer to join our Product Security team. This role is... .... Your expertise in TypeScript, Python, AWS, CI/CD, SAST, DAST, and terraform... ...stack technologies that power the world's leading models, and help enterprises and governments...Amazon Web ServiceFull time$200k - $220k
...they rely on every day.We are looking for a hands-on Corporate Security Engineer to own and improve the technical controls that keep our... ....Have working knowledge of at least one major cloud platform (AWS, GCP, or Azure) at the security configuration level.Communicate...Amazon Web ServiceWork at officeLocal area$159.3k - $212.8k
...a broad understanding of proactive security, have past experience leading security assessments, and have the ability to work with product and engineering teams in designing secure systems. In... ...as DNS, and TCP/IP- Experience with AWS products and services- Experience...Amazon Web ServiceInternshipFlexible hours$159.3k - $212.8k
...technology in every direction using the globe’s largest AWS deployment.As a Security Engineer, you will collaborate with software development teams to... ...candidate combines technical acumen with an ability to lead by influence and communicate clearly. Technically, this...Amazon Web ServiceInternshipFlexible hours$167.5k - $226.3k
...looking for an experienced, hands-on Senior Security Engineer specializing in AI who will drive and... ...AI security capabilities in AWS and for corporate. Develop AI security architecture... ...match your words with your actions while leading by example. Simplicity - Be like...Amazon Web ServiceCasual workWork at officeLocal area$159.3k - $212.8k
The AWS Security Hub team is looking for a passionate and innovative security engineer with a focus on compliance and security best practices for AWS, Azure, and GCP services... ...joining Security Hub in this position will lead the effort to define security best practices...Amazon Web ServiceInternshipFlexible hours$124k - $177k
...are looking for a Senior GCP Security Engineer who lives on GCP and can own... ...GCP-first. Familiarity with AWS and Azure is a plus, but your... ...security services including IAM, VPC Service Controls, Cloud... ...our employees and agents are leading the industry and impacting communities...Amazon Web ServiceLocal area$175.1k - $236.9k
...technology in every direction using the globe’s largest AWS deployment.As a Senior Security Engineer, you will collaborate with software development teams... ...candidate combines technical acumen with an ability to lead by influence and communicate clearly. Technically, this...Amazon Web ServiceInternshipFlexible hours$140k - $160k
...more informed investment decisions, leading to better financial outcomes. We... ...departments as we scale. The Role: As a Security Operations Engineer , you'll join our small, growing... ...security, specifically AWS (IAM, VPC, Secrets Manager). Proficiency...Amazon Web ServiceFull timeWork at officeRelocationArch
New York, NY25 days ago$95.86k - $208.27k
...class training facility, and leading market tools, we help our... ...Associate, SailPoint Identity Security Cloud Engineer to join our Advisory Technology... ..., workflows, policies, and IAM migrationsUnderstanding of... ...cloud environments including AWS, Azure, and GCPAbility to...Amazon Web ServiceH1bLocal area- ...RoleWe're looking for a hands-on senior security engineer to play a key role in building Rippling'... ...shared a blog about how they streamlined AWS access We spoke at BSides SF about... ...infrastructure with terraformOur Product Security lead talked about the Future Application...Amazon Web ServiceWork at officeRelocation3 days per week1 day per week
$180k - $220k
...mature, multi-framework security and compliance program—... ...behind our industry-leading Voice AI API. We're hiring... ...a Security Operations Engineer to join our IT & Security... ...—CISA, Security+, AWS Security Specialty, or... ...preferred), including IAM concepts, and of identity...Amazon Web ServiceFull timeRemote workAssemblyAI
New York, NY5 days ago
Do you want to receive more vacancies?
Subscribe and receive similar vacancies to Lead AWS IAM Security Engineer [Remote]. Be the first to apply!
Related searches
- lead network engineer New York, NY
- lead engineer New York, NY
- lead algorithm engineer New York, NY
- lead system engineer New York, NY
- lead operating engineer New York, NY
- lead web developer New York, NY
- lead infrastructure engineer New York, NY
- lead app. developer New York, NY
- security engineering manager New York, NY
- physical security engineer New York, NY