AWS IAM Engineer

We are looking for an experienced AWS IAM Engineer to implement, manage, and scale enterprise Identity and Access Management (IAM) solutions across AWS environments. This role focuses on hands-on engineering, automation, and standardization of IAM workloads, with a strong emphasis on IAM persona buildout for services , infrastructure-as-code modernization , and integration with Identity Directory / Identity Governance (IDC) platforms .

- Engineer and maintain AWS IAM workloads across multi-account environments

- Build, configure, and manage IAM roles, policies, permission boundaries, and trust relationships for human and service identities

- Implement least-privilege access models using RBAC and ABAC principles

- Troubleshoot and resolve IAM-related access and permission issues

- Design and implement IAM personas for services, applications, and platform workloads

- Support enterprise-scale rollout of standardized IAM personas across development, staging, and production environments

- Ensure IAM persona consistency, reusability, and compliance across teams and accounts

- Partner with security, platform, and application teams to onboard services to approved IAM models

- Convert and modernize CloudFormation-based IAM roles and policies to Terraform

- Engineer Terraform modules for reusable IAM components (roles, policies, instance profiles, service roles)

- Maintain and enhance Terraform pipelines for IAM deployments

- Support migration activities from legacy IAM implementations (e.g., CNF or bespoke frameworks) to Terraform

- Integrate AWS IAM with IDC solutions for identity lifecycle management

- Engineer IAM workflows supporting identity provisioning, deprovisioning, and access reviews

- Support federation and identity synchronization between AWS and IDC platforms

- Assist with audit readiness, compliance reporting, and governance controls

The base compensation range for this role in the posted location is: $70,176- $144,100.