IAM Security with AWS Engineer

Role -AWS Security Engineer(IAM)

Location - Dallas, TX (onsite)

Job type- W2 Contract Role

Job description below

• AWS Security & IAM Engineer
• Responsible for designing, implementing, and supporting secure AWS Identity and Access Management (IAM) solutions, including user lifecycle management, privileged access controls, and governance. Leverages automation and DevSecOps practices to strengthen security, improve compliance, streamline access management processes, and reduce operational effort.

Key Responsibilities

• Manage and support AWS IAM users, roles, policies, and access controls
• Implement and maintain least-privilege and privileged access controls
• Monitor and remediate IAM security risks, policy violations, and access issues
• Automate IAM provisioning, reporting, and governance using Python and AWS tools
• Support access reviews, certifications, and compliance requirements
• Strong knowledge of AWS cloud security, IAM, and least-privilege access models
• Strong Python scripting and automation skills for IAM processes, workflows, and API integrations using Python (Boto3), AWS CLI, or similar tools
• Hands-on experience with Infrastructure as Code (Terraform / CloudFormation) for IAM and resource provisioning
• Experience with access governance, including SCPs, permission boundaries, and least privilege models
• Experience working in multi-account AWS environments (Organizations / Control Tower)
• Strong hands-on with AWS IAM operations (roles, policies, access troubleshooting)
• Hands-on experience with CI/CD tools (Jenkins, GitLab, or similar)
• Good understanding of Linux systems and shell scripting
• Knowledge of Docker and Kubernetes
• Knowledge of networking concepts (VPC, subnets, security groups, routing)
• Familiarity with Git and version control workflows

Nice to have skills:

• Experience with IAM access request and approval workflows
• Knowledge of identity lifecycle management (joiner, mover, leaver processes) and access reviews, certifications, and compliance audits
• Experience with ServiceNow, Jira, or other ticketing platforms and change management process and supporting enterprise-scale IAM environments across multiple applications and teams
• Familiarity with identity governance and administration (IGA) concepts
• Understanding of security monitoring, audit logs, and SIEM integrations
• Experience with privileged access management (PAM) solutions
• A Security Consultant specializing in Identity & Access Management (IAM) services, helps organizations understand and manage the entire identity lifecycle within their enterprise. They utilize commercially available IAM tools such as ISIM/ISAM, Cloud Identity/Okta/Sailpoint/MS Entra, to provide Single Sign-On (SSO) and manage user identities effectively. The consultant is proficient in directory services like TDI and AD, and has hands-on experience with SAML, OAuth, and scripting. This skillset enables them to create a secure and streamlined identity management system for the organization. The consultant is also proficient in developing scripts to automate the provisioning and migration of identities across Cloud, OT, IOT and enterprise IT.