Cloud Security Architect

We are seeking an experienced Cloud Security Architect to design, implement, and govern Identity and Access Management (IAM) controls across a large-scale AWS multi-account environment. Key Responsibilities Design, implement, and maintain AWS IAM policies, roles, permission boundaries, and cross-account access controls. Enforce least-privilege access across AWS accounts and cloud resources. Secure privileged and non-privileged identities through effective access management and governance practices. Implement and manage Privileged Access Management (PAM) controls and identity governance processes. Develop and maintain cloud security standards, policies, and governance frameworks. Identify and remediate IAM misconfigurations, excessive permissions, and access-related security risks. Automate security controls, compliance checks, and access reviews using scripting and cloud-native tools. Monitor cloud security posture and support continuous compliance with enterprise security policies. Collaborate with cloud engineering, cybersecurity, infrastructure, and compliance teams to implement security best practices. Support security audits, risk assessments, and regulatory compliance initiatives. Required Skills and Experience 1. AWS Identity and Access Management (IAM) Strong hands-on experience with AWS IAM policies, roles, trust relationships, and permission boundaries. Experience managing IAM across large-scale AWS multi-account environments. Understanding of cross-account access, federation, SSO, and least-privilege principles. Experience identifying and remediating excessive permissions and IAM security risks. 2. Cloud Security Architecture and Governance Strong understanding of AWS security architecture and cloud security best practices. Experience implementing cloud security controls, governance policies, and access management standards. Knowledge of privileged and non-privileged identity security. Understanding of cloud security posture management and identity governance concepts. 3. Security Compliance and Automation Experience implementing automated security controls and compliance checks. Knowledge of cloud security frameworks and standards, such as NIST and CIS benchmarks. Ability to automate security tasks using scripting or cloud-native tools. Experience supporting security audits, compliance assessments, and remediation activities. 4. Privileged Access Management (PAM) Knowledge of PAM solutions, privileged account controls, and secure credential management. Understanding of identity lifecycle management, access reviews, and governance processes.