Senior AWS Cloud Architect – IAM Modernization & Identity Management

Job Summary:
We are seeking a Senior Cloud Architect to design and implement an AWS IAM modernization program on a long-term remote contract. The ideal candidate will lead SSO strategy and persona-based access design, with deep hands-on experience in permission boundaries, Service Control Policies (SCPs), Resource Control Policies (RCPs), and AWS IAM Identity Center architecture.

Key Responsibilities:

• Design and implement IAM permission boundaries across AWS accounts
• Clean up and consolidate existing SSO roles
• Build a controls placement framework for SCPs and RCPs
• Define a persona-based permission strategy
• Design Identity Center permission sets and map them to Active Directory groups
• Develop and update OPA (Open Policy Agent) policies
• Perform a Wiz.io gap assessment
• Lead SSO strategy and guide stakeholders on identity architecture decisions

Required Skills:

• AWS IAM (permission boundaries, SCPs, RCPs)
• AWS IAM Identity Center / SSO
• Federation: SAML, SCIM, PingFederate
• Terraform (Infrastructure as Code)
• Active Directory integration
• OPA policy development

Nice to Have:

• Experience with Wiz.io or other CSPM tools
• Experience in large, regulated enterprise environments

Location: Remote (US)