Architectural Engineer

About the company

• This position is listed on behalf of a partner company, who manages all applications and next steps.

Responsibilities

• Design, implement, and manage AWS IAM policies, roles, and permissions to enforce least-privilege access across multi-account cloud environments.
• Conduct regular audits of IAM configurations and access controls (NIST CSF, HITRUST, HIPAA, SOC 2, GDPR).
• Automate identity provisioning and de-provisioning workflows using Terraform, CloudFormation, and Ansible.
• Troubleshoot IAM-related issues, including access failures, policy conflicts, authentication errors, and permission misconfigurations.
• Support security incident response and forensic investigations using AWS CloudTrail and Azure Monitor.
• Implement and manage AWS Organizations, AWS Control Tower guardrails, and AWS Cognito.
• Assist with Azure identity and access management activities, including conditional access policies and Active Directory integration.

Requirements

• Bachelor's degree in Computer Science, MIS, or related field, or equivalent experience.
• At least five years of cloud engineering experience with focus on IAM in AWS and/or Azure.
• Hands-on experience with AWS IAM, AWS Organizations, AWS Control Tower, and AWS Cognito.
• Practical experience with Terraform and CloudFormation.
• Understanding of SAML, OpenID Connect (OIDC), and OAuth 2.0.
• Knowledge of cloud security principles, access governance, and identity lifecycle management.
• Familiarity with NIST CSF, HITRUST, HIPAA, SOC 2, and GDPR.
• AWS or Azure security certifications preferred.
• Willingness to travel approximately 0–10%.

Conditions

• Annual base salary: $76,100–$108,700.
• Fully remote opportunity for candidates based in the United States.
• Flexible vacation policy.
• 401(k) plan with employer matching.
• Comprehensive health benefits.
• Educational assistance and technical development academies.