Principal IAM Architect

Tasks

• Design and implement enterprise IAM architecture across AWS and cloud environments.
• Develop and manage AWS IAM roles, permission policies, trust policies, and reusable IAM policy templates.
• Implement fine-grained authorization using Cedar Policy Language and policy-based access controls.
• Define and enforce least-privilege access, role-based access control (RBAC), and attribute-based access control (ABAC).
• Integrate identity and authorization solutions using OAuth 2.0, OIDC, JWT, and identity federation.
• Automate IAM provisioning and policy deployment using Terraform, AWS CDK, or CloudFormation.
• Establish security controls for APIs, service identities, workloads, and AI-enabled applications.
• Collaborate with cloud security, application development, DevSecOps, and enterprise architecture teams.
• Implement security validation, policy testing, audit logging, and continuous compliance controls.

Requirements

• 15+ years of experience in IT, cloud security, IAM architecture, or enterprise security.
• Strong hands-on experience with AWS IAM, roles, policies, permissions, and least-privilege access.
• Experience developing IAM policy templates and reusable authorization frameworks.
• Knowledge or hands-on experience with Cedar Policy Language and fine-grained authorization.
• Strong understanding of RBAC, ABAC, identity federation, OAuth 2.0, OIDC, and JWT.
• Experience with Terraform, AW

Schedule

• 3+ Months (Extension Possible)
• 10% travel required for client workshops and meetings

Location

• Remote – Los Angeles, CA