IAM Architect/Designer with AWS & PAM

Location: Preferred to work from Deerfield IL, 60015 or Open for remote for strong profiles

End Client - Health care Sector

Experience 12+ Years

Skills Required: IAM Security with strong PAM and AWS specialization

Role Summary: Specialized IAM architect focused on AWS cloud identity and Privileged Access Management (PAM). Designs secure privileged access models and cloud-native identity architectures while aligning with global IAM standards.

Required Skills & Experience

• IAM Architect with 10+ years of experience in Identity & Access Management (IAM) or Cloud Security with strong specialization in AWS and Privileged Access Management (PAM).
• Strong expertise in AWS Identity & Access Management, AWS Organizations, Service Control Policies (SCPs), AWS IAM Identity Center, federation, Single Sign-On (SSO), and Multi-Factor Authentication (MFA).
• Hands-on experience with PAM platforms such as CyberArk, Delinea/Centrify, or BeyondTrust, including privileged account governance, Just-in-Time (JIT) access, secrets management, credential lifecycle management and privileged session management.
• Experience designing and implementing secure cloud identity architectures, privileged access frameworks and access governance capabilities.
• Proven ability to integrate cloud and enterprise identity ecosystems across authentication, authorization, and access governance domains.
• Strong understanding of least privilege principles, Role-Based Access Control (RBAC), identity lifecycle management, entitlement governance, compliance requirements, and security best practices.
• Working knowledge of Microsoft Entra ID, Enterprise Application onboarding and integration, Identity Governance & Administration (IGA), hybrid identity architectures, and modern identity federation concepts.
• Experience supporting enterprise-scale cloud and hybrid environments while collaborating with security, infrastructure, and application teams.
• Strong stakeholder management, solution design, technical consulting, and architectural governance capabilities.
• Experience supporting compliance, audit readiness, and security governance requirements for IAM and PAM programs.
• AWS, IAM, PAM related certifications preferred.

Secondary Skills

Exposure to Okta, Active Directory (AD), and SailPoint would be highly desirable.