IAM architect/designer (AWS/PAM)

Role Overview

Specialized IAM Architect/Designer focused on AWS cloud identity and Privileged Access Management (PAM). You will design secure privileged access models and cloud-native identity architectures aligned with global IAM standards.

Responsibilities

• Architect PAM solutions for:
  • privileged accounts
  • secrets
  • privileged session management
  • just-in-time (JIT) access
• Design AWS-native identity & access architectures, including:
  • IAM roles
  • Service Control Policies (SCPs)
  • IAM Identity Center
  • federation
• Define privileged access controls across cloud and hybrid environments
• Integrate PAM tooling with AWS and CI/CD, and with broader IAM platforms
• Collaborate with global IAM architects to ensure regional consistency
• Support audits and compliance for privileged access

Requirements

• 7+ years in IAM/security with strong PAM and AWS specialization
• Hands-on PAM platform experience with one or more of:
  • CyberArk
  • Delinea/Centrify
  • BeyondTrust
• Deep expertise in:
  • AWS IAM
  • IAM Identity Center
  • federation
• Knowledge of secrets management and privileged session controls
• Experience designing IAM for hybrid/cloud environments
• Based in or able to work from Bangalore (BLR); PAM/AWS certifications preferred

Location/Work Model

• Remote (posting mentions Bangalore as the base and includes “Location: United States”).