Lead AWS IAM Security Engineer [Remote]
EPAM Systems, Inc.
New York, NY
- Remote job
We are looking for a specialized Cloud Security Engineer to secure our next-generation multi-region architecture. In this role, you will architect, implement, and automate robust security controls across AWS — spanning enterprise IAM, Public Key Infrastructure (PKI), secrets management, and cloud security posture management (CSPM) — while ensuring strict compliance for PCI-scoped fintech workloads.
Req.#1080529720
Identity & Access Management: Design and enforce secure AWS IAM policies, roles, permission boundaries, Service Control Policies (SCPs), and EKS Pod Identity / IRSA configurations Cloud Detection & Posture Management: Implement and manage security monitoring and posture tools including Amazon GuardDuty, AWS Security Hub, AWS CloudTrail, Macie, and IAM Access Analyzer PKI & Certificate Management: Build and manage automated certificate lifecycle workflows using AWS Private CA (FIPS 140-2 Level 3 HSM-backed), ACM, and mTLS trust stores, coordinating closely with the client's Security approvals Secrets & Encryption: Secure sensitive data using AWS KMS (including Multi-Region Keys), Secrets Manager, and the External Secrets Operator Baseline (Mandatory): Strong hands-on experience with AWS CDK and TypeScript for security-as-code automation AWS PKI & TLS: Deep expertise in AWS Private CA (HSM-backed), ACM, mTLS trust stores, automated certificate issuance/rotation/revocation, and PayPal Security compliance workflows Proficiency with Amazon GuardDuty, Security Hub (AWS FSBP, CIS, NIST benchmarks), Macie, and IAM Access Analyzer Experience supporting strict PCI-scoped fintech audits and CSPM frameworks Identity & Secrets Management: Advanced IAM expertise (roles, trust policies, permission boundaries, SCPs, IRSA/EKS Pod Identity), Secrets Manager, External Secrets Operator, and KMS/MRK envelope encryption Supply Chain & Application Security: SAST tools (SonarQube, CodeQL), Dependabot, and software supply chain security (image signing and provenance via Cosign/SLSA) integrated with CDK & TypeScript Experience with Wiz (CSPM/CNAPP) Advanced deployments of AWS Private CA (PCA) and complex KMS key hierarchiesVacancy posted 11 days ago
Similar jobs that could be interesting for youBased on the Lead AWS IAM Security Engineer [Remote] in New York, NY vacancy
- GuidePoint Security is seeking an entry-level AWS security associate to assist in cloud security assessments and architecture reviews. You will help document... ...while supporting AWS security configurations including IAM, CloudTrail, GuardDuty, and Security Hub. The role...Amazon Web ServiceRemote job
$86.3k - $123.3k
...world of veterinary medicine. IAM / Automation Lead Information Technology •... ...access provisioning, role engineering, and automated de-provisioning... ...8 month horizon, balancing security uplift with employee... ...& Infrastructure Platforms AWS IAM, AWS Identity Center (SSO...Amazon Web ServiceFull timeContract workTemporary workRemote workFlexible hoursNight shift- Defining and evolving security architecture for identity and privileged... ...access, the full-time Principal IAM/PAM Security Architect will... ...platforms and cloud environments Lead architecture reviews and risk assessments... ...knowledge of cloud IAM across AWS, Azure, GCP, and OCI Virtual...Amazon Web ServiceFull time
- ...Founding Security Engineer — AI Scale-Up | New York A venture-backed AI company in New York is... ...find Cloud and infrastructure security: IAM and least privilege, network... ...Kubernetes security, and cloud posture across AWS or GCP Security tooling in CI/CD: SAST...Amazon Web ServiceFull time
Franklin Fitch
New York, NY2 days ago $144.25k - $256.25k
...commitment to back the broader engineering community through open... ...is our Information Security organization, enabling... ..., Cybersecurity IAM Engineering provides leadership... ...colleagues, leading high-performing teams in... ...identity services across AWS, Azure, and GCP, Active...Amazon Web ServiceVisa sponsorshipAmerican Express
New York, NY2 days ago- ...is looking for an experienced security engineer skilled in detection and... ...posture platforms and native AWS cloud servicesConduct proactive... ...words with your actions while leading by example. Simplicity - Be like... ...(CloudTrail, GuardDuty, IAM, VPC Flow Logs, Lambda, etc.)...Amazon Web ServiceCasual workLocal area
Justworks
New York, NY3 days ago $180k - $220k
...here.About the RoleAs a Senior Security Engineer, Detection and Response you... ...building detections from scratch, leading investigations, and driving... ..., staging and production AWS accounts, the retention and cost... ...infrastructure in AWS: VPCs, IAM, networking, private service...Amazon Web ServiceFull timeWorldwideAircall
New York, NY1 day ago- ...I’m currently working with a leading global quantitative investment... ...is looking to add a Staff Security Engineer to its growing Platform Security... ...Working across networking, IAM, privileged access, containers... ...infrastructure, ideally with AWS Solid knowledge of network...Amazon Web ServiceFull time
NJF Global Holdings Ltd
New York, NY2 hours ago $175k - $220k
...are looking for a highly technical Senior Security Engineer who thrives on building security... ...workflows.Hands-on experience securing AWS, Azure, or GCP environments.Experience with... ...Security, Cloud security, SaaS security, IAM, and Security monitoring technologies.Strong...Amazon Web ServiceFull timeWork at officeSigma Computing
New York, NY2 days ago$163.94k - $215.18k
Hi, we're Oscar. We're hiring a Senior Security AI Engineer 1 to join our Security Engineering... ...More Secure AI Data & Model Lifecycle: Lead the development and implementation of... ...managing cloud security infrastructure (AWS/GCP IAM boundaries).Comfort and fluency with cutting...Amazon Web ServiceFull timeWork at officeFlexible hoursOscar Health Insurance
New York, NY5 days ago- ...Security Engineering @ Clay We're building a modern security organization from... ...our cloud environment (IAM, network policies, container... ...(we currently use Terraform, AWS Config, and AWS Security Hub)... ...Application Security Lead secure design and secure coding...Amazon Web ServiceFlexible hours
CLAY
New York, NY5 days ago - ...Job Description Senior Security Engineer Full Time Opportunity 5 days on site in NYC, NY... ...tightening and configuring relevant Amazon AWS and Microsoft Azure services Perform... ...risk assessment of NACLs, Security Groups, IAM, S3, KMS, and other core AWS...Amazon Web ServiceFull time
Chris Baily
New York, NY5 days ago - ...role We're hiring Senior Security Engineers to design, harden, and continuously... ...untrusted code safely. Lead our internal red team. You’... ...security, cloud security (AWS in particular), identity and... ...Hands‑on AWS security depth (IAM, KMS, networking, multi‑account...Amazon Web Service
Nova Intelligence
New York, NY5 days ago - ...help build the platform engineers turn to ship AI... ...experienced and proactive Security Engineer to help us build... ...infrastructure, including cloud (AWS/GCP) environments and... ...management: Lead proactive vulnerability... ...and access management (IAM): Oversee IAM strategies...Amazon Web ServiceFlexible hours
BaseTen
New York, NY1 day ago - ...is one of the world’s leading internet financial platform... ...for:The Circle Security Team works to protect Circle... ...native infrastructure (AWS + EKS), and the AI tooling... ...across AWS + EKS: IAM compromise, identity federation... ...response, or security engineering.3+ years of experience...Amazon Web ServiceContract workWork experience placementFlexible hoursShift workNight shift
Circle
New York, NY1 day ago - ...Principal Security Engineer Anywhere in USA & Canada (New York, Dallas, Toronto is preferred... ...code, APIs, CI/CD pipelines, AWS infrastructure, multi-tenant platform boundaries... ...specific attack path analysis including IAM privilege escalation, metadata service abuse...Amazon Web Service
3B Staffing LLC
New York, NY3 days ago - ...everyone About the team Engineering at Privy is... ...often be "the PM". Security mindset: A great portion... ...like Node, React, and AWS so we can focus our engineering... ...improvements. Lead focused investigations... ...investigation. Experience with IAM, secrets management,...Amazon Web ServiceFlexible hours
Stripe
New York, NY5 days ago $176k - $196k
...and buyer clients. Senior Security Engineer, Cloud Security Security... ...our products. You will lead our effort to build security... ...cloud platforms, particularly AWS and Azure. Strong analytical... ...features, particularly AWS (IAM, EC2, VPC, container services...Amazon Web ServiceMinimum wageFlexible hoursCompass
New York, NY2 days ago$250k - $350k
...Security Software Engineer (IAM & Application Security) Salary: $250k-350k Total compensation: ranging $400k-750k depending on performance and seniority A leading quantitative trading firm is hiring a Security Software Engineer to join a small, highly skilled...NJF Global Holdings Ltd
New York, NY2 days ago$145k - $200k
...Palantir builds the world's leading software for data-... ...Palantir's Offensive Security team probes our own products... ...an Offensive Security Engineer, you will test internal... ...through to IMDS abuse, IAM privilege escalation,... ...the security of cloud (AWS, Azure, or GCP) and containerized...Amazon Web ServiceWork experience placementWork at officeRemote workWork from homeRelocation packagePalantir Technologies
New York, NY1 day ago$149k - $235k
...distributed systems spanning AWS, GCP, and self-managed Kubernetes... ...looking for a Senior Cloud Security Engineer II to join our Security... ...patterns other engineers build on, lead cross-team security... ...systems Drive control-plane and IAM security strategy across AWS...Amazon Web ServiceWork at officeLocal areaFlexible hoursBraze
New York, NY2 days ago- ...Millennium is seeking an Identity Security Engineer to lead security engineering for Windows, Active Directory, and Entra ID across on‑prem and cloud environments. You will define architecture for authentication platforms and serve as a technical authority on SAML, OAuth...
- ...company looking for a Senior Cloud Security Engineer II to join its Security... ...with deep experience across AWS, Kubernetes, detection engineering, incident response, IAM, threat modeling, and security... ...responsibilities include: Lead cloud security architecture and...Amazon Web ServiceFull time
Colossus Technologies Group
New York, NY2 hours ago $182k - $242k
...with confidence. Trusted by leading AI labs, startups, and global... ...an experienced Senior Network Security Engineer for our network security initiatives... ...securing cloud platforms (AWS, GCP, Azure or custom... ...identity and access management (IAM) systems, single sign-on, multi...Amazon Web ServicePermanent employmentFull timeTemporary workCasual workWork at officeFlexible hoursCoreWeave
New York, NY3 days ago- ...product and infrastructure security, the full-time Senior Security Engineer will collaborate with engineering leads to conduct design and code reviews... ...process Deep expertise in IAM, secrets management, network... ..., and container security on AWS or similar platforms Virtual...Amazon Web ServiceFull timeRemote work
$200k - $260k
...here.We are looking for a seasoned Engineering Manager to lead Aircall's Security Engineering organisation. This is a... ...of Aircall's cloud infrastructure (AWS), with a strong emphasis on zero-trust... ..., identity & access management (IAM), and workload isolation, and secure...Amazon Web ServiceWorldwideAircall
New York, NY5 days ago$210k - $234k
...service to seller and buyer clients. Engineering @ Compass Compass has built the... ...that will transform real estate. Security @ Compass We are hands-on... ...application and cloud security fundamentals: AWS and/or GCP, Kubernetes, IAM, API security, and DevSecOps...Amazon Web ServiceMinimum wageFlexible hoursJobleads-US
New York, NY5 days ago$165k - $242k
...with confidence. Trusted by leading AI labs, startups, and global... ...at .What You’ll DoAs a Cloud Security Engineer at CoreWeave, you'll drive the... ...public cloud platforms (e.g., AWS, Azure, GCP)Lead the design,... ...including primitives such as IAM, detection and monitoring, configuration...Amazon Web ServicePermanent employmentFull timeTemporary workCasual workWork at officeFlexible hoursCoreWeave
New York, NY2 days ago$2,000 per month
...tier investors and staffed by leading engineers, Etched is redefining the... ..., building and maintaining a secure yet friction-free computing environment... ...models. Familiarity with IAM and SSO systems such as Okta,... ...hybrid environments such as AWS, GCP, or on‑prem clusters and...Amazon Web ServiceRemote jobWork at officeRelocation packageFlexible hours- ...capabilities and is seeking a Senior GCP Security Engineer to help build security directly into its... ..., and deployment layers. Govern IAM, service accounts, workload identities,... ...SIEM or Elasticsearch. Cribl Stream. AWS security and Bedrock. Policy-as-code...Amazon Web ServiceFull time
Madison-Davis, LLC
New York, NY2 days ago
Do you want to receive more vacancies?
Subscribe and receive similar vacancies to Lead AWS IAM Security Engineer [Remote]. Be the first to apply!
Related searches
- lead solutions engineer New York, NY
- lead algorithm engineer New York, NY
- lead product engineer New York, NY
- lead engineer New York, NY
- lead industrial engineer New York, NY
- lead operating engineer New York, NY
- lead network engineer New York, NY
- lead app. developer New York, NY
- lead infrastructure engineer New York, NY
- lead android developer New York, NY