AWS IAM/Platform Engineer
Any Visa will work Only W2 Pay Rate
Hybrid preferred Raleigh, NC,
What are the top 3 skills required for this role?
AWS IAM, IAM Identity Center (SSO), Identity Governance, RBAC, Access Management Terraform, Python Automation, Lambda, Step Functions, EventBridge, CI/CD
Job Description/ Responsibilities
Design, implement, and manage AWS IAM and IAM Identity Center solutions across enterprise multi-account AWS environments.
Develop IAM policies, permission boundaries, trust relationships, RBAC, permission sets, and least-privilege access models.
Manage AWS Organizations governance including SCPs, RCPs, tag policies, backup policies, guardrails, and account lifecycle controls.
Configure and support AWS Control Tower, AWS Config, GuardDuty, CloudTrail, and Security Hub for governance and security posture monitoring.
Build event-driven automation using Python, Lambda, Step Functions, EventBridge, Boto3, APIs, and reusable operational components.
Support governance-as-code and IAM automation through Git, CI/CD pipelines, CloudFormation, CDK, or Terraform with automated validation.
Deep expertise in AWS IAM, IAM Identity Center, AWS Organizations, Control Tower, IAM policy language, evaluation logic, cross-account access, and permission boundaries.
Hands-on experience with AWS Config, GuardDuty, CloudTrail, Security Hub, compliance monitoring, and remediation automation.
Strong Python development skills with AWS Lambda, Step Functions, EventBridge, Boto3, APIs, and event-driven automation frameworks.
Experience with Git-based source control, CI/CD pipelines, version-controlled policies, permission sets, and governance configurations.
Preferred Qualifications / Certifications
Experience implementing enterprise AWS Landing Zones, account vending, onboarding, and governance automation across AWS Organizations.
Hands-on IAM Identity Center permission set management and account assignment automation through CI/CD pipelines.
Familiarity with Terraform, CloudFormation, AWS CDK, GitOps approaches, compliance frameworks, and identity governance patterns.
Preferred certifications: AWS Solutions Architect Associate/Professional, AWS Security Specialty, AWS DevOps Engineer Professional.
Soft Skills
Strong problem-solving, independent ownership, stakeholder communication, and ability to translate security and governance requirements into scalable AWS solutions.
|
