AWS IAM Engineer

AWS IAM Engineer

IAM Engineer Certifications • AWS Security, AWS Solutions Architect, Cybersecurity certifications highly preferred Must-Have • 8–10 years in Identity and Access Management and related security domains • 5+ years of experience in Cloud IAM Management on AWS (Azure/GCP a plus) • Strong hands-on experience with AWS IAM (roles, policies, federation), Terraform automation, and multi-account deployments • Experience integrating IAM with AWS services (Aurora, EventBridge, MWAA, LakeFormation, Snowflake, DBT, OpenSearch, AWS Transfer Family) • Expertise in designing and automating CI/CD pipelines for IAM and platform services using AWS CodePipeline, Jenkins, and Terraform • Knowledge of security frameworks (NIST CSF, CCM v4, CIS Benchmarks) and regulatory compliance (PCI-DSS, HIPAA, FedRAMP) • Experience with SSO/Federation (SAML, OAuth, FIDO2), MFA, and directory services • Strong scripting skills (Python, PowerShell, bash, AWS SDK) and IaC automation (Terraform, CloudFormation, GitHub) • Subject-matter expertise in Zero Trust, least privilege, defense-in-depth, and secure-by-design principles • Experience in program governance, documentation, and stakeholder management • Ability to prepare architecture diagrams, operational runbooks, and compliance documentation • Direct customer interaction and stakeholder expectations management Nice-to-Have • CISSP Certification • 3+ years with third-party IAM tools (CyberArk, Okta, SailPoint, Entra ID, Ping) • Experience with cloud data services (Snowflake, DBT) and AWS observability tools (CloudWatch)

Key Responsibilities • Design and implement advanced AWS platform services (DevOps, Security, Networking, Identity, Monitoring, Finance, and Data) for enterprise users, aligned with client policies. • Engineer and automate provisioning of services and pilot applications using Terraform, streamlining deployment and operational efficiency. • Integrate and enforce IAM policies and security controls for robust compliance and resource protection. • Establish automated CI/CD pipelines for application and IAM deployments. • Implement program governance frameworks, coordinate with stakeholders, and support documentation, reporting, and UAT. • Develop reusable Terraform modules for AWS services and data platforms, parameterize for multi-account use, and conduct unit testing. • Prepare and maintain comprehensive documentation, including architecture diagrams, compliance validation, and operational runbooks.

Support defect management, deployment reviews, and knowledge transfer sessions