Description

Design and maintain secure, least-privilege access architectures across AWS environments.

This role is remote.

Responsibilities

• Architect and implement AWS IAM solutions including roles, trust policies, and policy conditions.
• Design cross-account access patterns and manage AWS Organizations Service Control Policies (SCPs).
• Define and enforce IAM standards, patterns, and processes for application and platform teams.
• Troubleshoot and resolve complex IAM-related access issues and resource policy conflicts (S3, KMS).
• Review cloud architecture designs to ensure adherence to secure, least-privilege principles.

Required Skills

• 10+ years of experience in cloud architecture or security engineering.
• Deep expertise in AWS IAM, including identity federation, roles, and policies.
• Hands-on experience with AWS resource policies for services like S3 and KMS.
• Proven ability to troubleshoot and resolve IAM access issues in production environments.
• Strong understanding of AWS Organizations and SCP impact analysis.
• Experience defining and maintaining enterprise IAM standards and processes.
• Effective communication skills to collaborate with application and platform teams.

Preferred Skills

• AWS Certified Security – Specialty or Solutions Architect – Professional certification.
• Experience with Infrastructure as Code (Terraform, CloudFormation) for IAM management.

Key Skills

Education

Any Graduate