Remote: Senior AWS Cloud IAM Engineer

Role Overview

Senior AWS Cloud IAM Engineer (100% remote, full-time). You will design, implement, and troubleshoot secure AWS Identity and Access Management (IAM) solutions across environments and accounts.

Responsibilities

• Design and implement AWS IAM roles, trust policies, policy conditions, and cross-account access.
• Work with AWS resource policies (e.g., S3, KMS) and understand SCP (Service Control Policy) impact in AWS Organizations.
• Troubleshoot and resolve IAM-related access issues.
• Review and help design cloud architecture with a focus on secure, least-privilege access.
• Define and maintain IAM standards, patterns, and processes.
• Collaborate with application and platform teams through strong communication.

Requirements

• Strong hands-on expertise in AWS IAM (roles, trust policies, conditions, cross-account access).
• Experience with AWS resource policies (S3, KMS) and SCP effects in AWS Organizations.
• Proven ability to debug and fix IAM access problems.
• Experience defining IAM standards/patterns/processes.

Nice-to-haves

• Experience designing secure cloud architectures and partnering effectively across teams.