Description

You will design and manage cloud identity and access management (IAM) solutions to ensure secure, scalable, and compliant access across AWS environments.

Responsibilities

• Design and manage IAM roles, policies, and permission boundaries across multi-account AWS environments.
• Enforce least-privilege access and RBAC/ABAC models to strengthen identity governance.
• Develop reusable IAM modules using Infrastructure as Code tools like Terraform or AWS CDK.
• Integrate identity validation into CI/CD pipelines to secure deployment workflows.
• Monitor IAM activity and investigate identity-related issues using CloudTrail and AWS Config.

Required Skills

• 7-10 years of experience, with 3-5 years specifically in cloud engineering, DevOps, or IAM roles.
• Deep expertise in AWS Identity Center, IAM, Organizations, and Single Sign-On (SSO).
• Proficiency with Infrastructure as Code (IaC) using Terraform or AWS CDK.
• Strong Python skills for automation, scripting, and integration tasks.
• Experience with Git and CI/CD pipeline automation.
• Hands-on experience with AWS monitoring and auditing tools including CloudTrail, AWS Config, and Security Hub.
• Solid understanding of identity governance, access control principles, and least privilege enforcement.
• Knowledge of cloud security best practices, encryption, key management, and compliance frameworks.
• Bachelor's Degree or equivalent graduate education.

Key Skills

Education

Any Graduate