Responsibilities:
•
Design, architect, and implement AWS IAM solutions, including policies, roles, permissions, and federation.
•
Provide strategic guidance on identity lifecycle management, authentication, authorization, and access governance.
•
Collaborate with security, cloud, and application teams to ensure best practices in AWS security architecture.
•
Conduct security assessments, audits, and reviews of IAM configurations and entitlements.
•
Ensure compliance with industry standards and regulatory frameworks (e.g., ISO 27001, NIST, GDPR, HIPAA).
•
Define standards and frameworks for role-based access control (RBAC), least privilege, and Zero Trust principles.
•
Troubleshoot complex access management issues and recommend improvements
•
Assume ownership of Identity & Access Management system integration and work closely with teams to complete development and customization tasks
•
Prepare high level and low level design documents
Technical Skills:
•
Excellent understanding of Identity and Access Management solutioning, consulting and configuration experience.
•
Hands-on experience in designing and implementing AWS IAM solutions for human and non-human identities
•
Strong knowledge of Identity and Access Management concepts, including Identity Life cycle management, role definition, request processes, access reviews, access controls and privileges, authentication, authorization, MFA, SSO, federation, etc.
•
Expertise in cloud security and secure design principles.
•
Good understanding of Privileged Access Management (PAM) tools and framework.
•
Have worked on at least 2 AWS or other IAM deployments.
•
Strong Software Development Background.
•
Strong problem resolution capability & delivery focus.
•
Excellent communication skills.
Mandatory Skills / Tools:
•
AWS IAM, authentication and access control to AWS, access governance within AWS.
•
Excellent domain and consulting knowledge of Identity and Access Management
•
Excellent working knowledge of at least one IDAM tool – Okta, CyberArk
Other Skills:
•
Excellent Communication and documentation skills
•
Must be good at thinking and understanding end-to-end identity and access management business requirements and solutions
•
Other IDAM tools, such as, SailPoint, Okta and CyberArk will be added advantage
We are an equal opportunity employer. All aspects of employment including the decision to hire, promote, discipline, or discharge, will be based on merit, competence, performance, and business needs. We do not discriminate on the basis of race, color, religion, marital status, age, national origin, ancestry, physical or mental disability, medical condition, pregnancy, genetic information, gender, sexual orientation, gender identity or expression, national origin, citizenship/ immigration status, veteran status, or any other status protected under federal, state, or local law.