Description

Technical Requirements
AWS Networking
General understanding of VPC architecture, subnets, route tables, and internet/NAT gateways
Familiarity with Transit Gateway connectivity and multi-account networking patterns
Understanding of NACLs and Security Groups and how they interact at different layers
Experience with DNS resolution (Route 53) in multi-account environments
IAM & Identity Management
IAM policy authoring (JSON), permission boundaries, and cross-account role assumption
Understanding of how IAM policies, SCPs, and permission boundaries interact and evaluate
Experience with federated access patterns and temporary credentials (STS)
SSO Technologies
Prior experience with SSO technologies (SAML, OIDC)
Familiarity with AWS IAM Identity Center configuration and assignment
Understanding of external IdP integration patterns
Service Control Policies (SCPs)
Author and manage SCPs across AWS Organizations (deny-list/allow-list strategies)
Implement region restrictions, service restrictions, root lockdown, and encryption enforcement
Understand SCP inheritance, limitations, and testing without production disruption
Account Factory for Terraform (AFT)
 

Key Skills

Education

Any Graduate