We are seeking an experienced Cloud Security Architect to design, implement, and govern Identity and Access Management (IAM) controls across a large-scale AWS multi-account environment.
Key Responsibilities
- Design, implement, and maintain AWS IAM policies, roles, permission boundaries, and cross-account access controls.
- Enforce least-privilege access across AWS accounts and cloud resources.
- Secure privileged and non-privileged identities through effective access management and governance practices.
- Implement and manage Privileged Access Management (PAM) controls and identity governance processes.
- Develop and maintain cloud security standards, policies, and governance frameworks.
- Identify and remediate IAM misconfigurations, excessive permissions, and access-related security risks.
- Automate security controls, compliance checks, and access reviews using scripting and cloud-native tools.
- Monitor cloud security posture and support continuous compliance with enterprise security policies.
- Collaborate with cloud engineering, cybersecurity, infrastructure, and compliance teams to implement security best practices.
- Support security audits, risk assessments, and regulatory compliance initiatives.
Required Skills and Experience
1. AWS Identity and Access Management (IAM)
- Strong hands-on experience with AWS IAM policies, roles, trust relationships, and permission boundaries.
- Experience managing IAM across large-scale AWS multi-account environments.
- Understanding of cross-account access, federation, SSO, and least-privilege principles.
- Experience identifying and remediating excessive permissions and IAM security risks.
2. Cloud Security Architecture and Governance
- Strong understanding of AWS security architecture and cloud security best practices.
- Experience implementing cloud security controls, governance policies, and access management standards.
- Knowledge of privileged and non-privileged identity security.
- Understanding of cloud security posture management and identity governance concepts.
3. Security Compliance and Automation
- Experience implementing automated security controls and compliance checks.
- Knowledge of cloud security frameworks and standards, such as NIST and CIS benchmarks.
- Ability to automate security tasks using scripting or cloud-native tools.
- Experience supporting security audits, compliance assessments, and remediation activities.
4. Privileged Access Management (PAM)
- Knowledge of PAM solutions, privileged account controls, and secure credential management.
- Understanding of identity lifecycle management, access reviews, and governance processes.