AWS Cloud Security IAM Lead

8

8-12 years of experience in cloud security IAM or infrastructure security engineering preferably within BFSI or regulated enterprises.

Strong hands-on expertise in AWS security services including:

AWS IAM (roles policies permission boundaries SCPs)

AWS Organizations & multi-account governance

AWS Identity Center (SSO)

AWS KMS Secrets Manager

AWS CloudTrail Config GuardDuty Security Hub

Deep understanding of IAM design and governance including:

Role-based and attribute-based access control (RBAC/ABAC)

Least privilege model implementation

Identity lifecycle management (joiner/mover/leaver)

Experience integrating AWS IAM with enterprise identity providers such as:

Azure AD / Entra ID

Okta or similar IdP platforms

Key Responsibilities

AWS IAM & Identity Security Leadership

Own the design and implementation of enterprise-wide AWS IAM strategy across multi-account environments.

Define and enforce least-privilege access models including role-based and attribute-based controls.

Lead integration of AWS IAM with enterprise identity providers (Azure AD/Okta) ensuring secure SSO and federation.

Establish and maintain IAM governance processes including access reviews certification and audit readiness.

Cloud Security Operations

Monitor and respond to security alerts across AWS using tools such as GuardDuty Security Hub and CloudWatch.

Investigate and remediate IAM-related security risks misconfigurations and access issues.

Oversee logging and monitoring strategy using CloudTrail Config and centralized SIEM integrations.

Collaborate with SecOps teams to ensure timely incident response and root cause analysis.

Access Management & Compliance

Manage user access lifecycle (provisioning deprovisioning entitlement reviews) across AWS environments.

Ensure compliance with regulatory and enterprise security standards (NIST CIS benchmarks etc.).

Conduct periodi c access audits and enforce remediation of policy violations.

Support internal and external audits by providing IAM evidence and controls documentation.

Security Architecture & Governance

Define and implement security guardrails using AWS Organizations SCPs and automation frameworks.

Partner with platform and application teams to embed security-by-design principles.

Drive adoption of policy-as-code and automated compliance checks in CI/CD pipelines.

Provide architectural guidance for secure onboarding of new workloads and services on AWS.