Description

You will design and implement AWS Identity and Access Management strategies, owning the security posture of cloud environments.

This role is on-site.

Responsibilities

• Design and implement AWS IAM strategies, including users, roles, policies, and permission boundaries.
• Develop and manage Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC) models.
• Integrate AWS IAM with external identity providers using SAML or OIDC for federated authentication and SSO.
• Automate IAM provisioning using Infrastructure as Code (IaC) tools and embed controls into CI/CD pipelines.
• Enforce least privilege, just-in-time access, and conduct regular IAM reviews and access audits.

Required Skills

• 5–7 years of experience in Identity and Access Management with a focus on AWS Cloud.
• Deep hands-on experience with AWS IAM, roles, policies, permission boundaries, and trust relationships.
• Experience managing multi-account environments using AWS Organizations.
• Strong knowledge of authentication protocols, specifically SAML and OIDC.
• Hands-on experience with IaC tools such as Terraform or CloudFormation.
• Proficiency with DevOps practices and integrating security into CI/CD.
• Experience supporting compliance initiatives (e.g., ISO 27001, SOC2).
• Familiarity with monitoring IAM activities using CloudTrail, Security Hub.

Preferred Skills

• Experience with AWS Cognito for application authentication.
• Basic scripting skills in Python or Bash.

Key Skills

Education

Bachelor's degree