Platform Engineer (Cloud IAM & Governance)
Houston, Texas, United States of America
Contract
6 days ago
$60 - $70 USD
Key skills
AWSAzureTerraformKubernetesVaultEKSAKSHelmArgoCDIAMAzure ADEntra IDOAuthSAMLGitOpsService MeshZero Trust
About this role
Role Overview
We are seeking a Senior Platform Engineer with a deep specialization in Identity and Access Management (IAM). In this role, you will not just manage cloud resources; you will architect the "Identity-First" foundation for our multi-cloud environment. You will be responsible for building automated governance frameworks, Zero Trust architectures, and self-service IAM platforms that empower our developers while maintaining rigorous compliance standards (FedRAMP, NIST, or SOC 2).
Key Responsibilities
Platform Engineering: Build and maintain an internal developer platform across AWS and Azure, focusing on automated provisioning using Terraform and ArgoCD.
IAM Automation: Architect and implement automated IAM guardrails and "Policy-as-Code" (using OPA or Sentinel) to enforce least-privilege access across 100+ cloud accounts.
Kubernetes Governance: Secure enterprise EKS/AKS clusters by implementing IRSA (IAM Roles for Service Accounts) and Workload Identity to eliminate static credentials.
Identity Integration: Manage cross-cloud identity synchronization between AWS IAM Identity Center and Microsoft Entra ID (Azure AD).
Security & Compliance: Ensure all platform infrastructure meets FedRAMP/NIST baselines through automated remediation and continuous monitoring.
Secrets Management: Own the lifecycle of credentials and certificates using HashiCorp Vault or cloud-native Secrets Managers.
Technical Requirements
Experience: 10+ years in Cloud/DevOps, with at least 3 years focused on Platform Engineering and IAM.
Multi-Cloud Mastery: Proven experience managing production workloads in both AWS and Azure.
Infrastructure as Code: Expert-level proficiency in Terraform (modular design) and GitOps workflows.
Containers: Deep knowledge of Kubernetes (EKS/AKS), Helm, and service mesh technologies.
Identity Protocols: Strong understanding of OIDC, SAML, OAuth 2.0, and RBAC/ABAC models.
Compliance: Experience working within highly regulated frameworks (FedRAMP, HIPAA, or PCI DSS).