AWS Security & IAM Engineer

Role AWS Security & IAM Engineer

Location: Onshore

Mode of work: Remote

Role Summary

We are seeking an AWS Security & IAM Engineer to design, implement, and manage secure identity, federation, authorization, and access governance solutions across enterprise AWS environments supporting healthcare and regulated workloads.

Key Responsibilities

• Design AWS IAM architecture and access governance models.
• Configure IAM roles, policies, permission boundaries, and cross-account access.
• Implement Microsoft Entra ID federation using SAML and OIDC.
• Configure Amazon Cognito for enterprise authentication.
• Manage JWT validation, authorization policies, and role mappings.
• Design least-privilege access controls across AWS services.
• Implement MFA, privileged access management, and break-glass procedures.
• Support AWS STS, IAM Roles Anywhere, and workload identity federation.
• Review IAM policies and eliminate excessive permissions.
• Support audit, compliance, and security reviews.

Required Skills

• AWS IAM
• Microsoft Entra ID
• SAML 2.0
• OIDC
• OAuth
• Cognito
• JWT Authentication
• AWS STS
• Identity Federation
• RBAC
• Access Governance
• Privileged Access Management

Preferred Experience

• Healthcare or Government Projects
• Zero Trust Architecture
• Enterprise Federation
• Compliance-driven IAM Programs