Senior Architectural Engineer
J
JobgetherCloud security
Fully remote opportunity for candidates based in the United States.Full-TimeSenior
Salary76,100 - 108,700 USD per year
Apply NowOpens the employer's application page
Job Details
- Experience
- At least five years of cloud engineering experience, with a strong focus on identity and access management in AWS and/or Azure environments.
- Required Skills
- TerraformAnsibleCloudFormation
Requirements
- Bachelor's degree in Computer Science, Management Information Systems (MIS), or a related field, or equivalent professional experience.
- At least five years of cloud engineering experience focused on identity and access management in AWS and/or Azure environments.
- Hands-on experience with AWS IAM, AWS Organizations, AWS Control Tower, and AWS Cognito.
- Practical experience with infrastructure-as-code tools, particularly Terraform and CloudFormation.
- Understanding of SAML, OpenID Connect (OIDC), and OAuth 2.0.
- Knowledge of cloud security principles, access governance, least-privilege implementation, and identity lifecycle management.
- Familiarity with NIST CSF, HITRUST, HIPAA, SOC 2, and GDPR.
- Experience troubleshooting cloud access issues and analyzing identity-related logs for security investigations.
- AWS or Azure security certifications are preferred, such as AWS Certified Security – Specialty or Microsoft Certified: Azure Security Engineer Associate.
- Willingness to travel occasionally, approximately 0–10%.
- Availability to use a video camera during all interviews and throughout the initial week of orientation.
Responsibilities
- Design, implement, and manage AWS IAM policies, roles, and permissions across multi-account cloud environments.
- Audit IAM configurations and access controls against security frameworks and regulatory requirements.
- Automate identity provisioning and de-provisioning with Terraform, CloudFormation, and Ansible.
- Troubleshoot access failures, policy conflicts, authentication errors, and permission misconfigurations.
- Collaborate with security, networking, and application teams to incorporate IAM best practices into cloud architectures and deployments.
- Analyze identity activity, access patterns, and audit logs to support incident response and forensic investigations.
- Implement and manage AWS Organizations for account governance and centralized administration.
- Configure AWS Control Tower guardrails and account provisioning processes.
- Support AWS Cognito implementations and Azure IAM activities, including conditional access, identity protection, and Active Directory integration.
- Improve cloud IAM governance, security controls, and operational processes.
View Full Description & ApplyYou'll be redirected to the employer's site
