AWS IAM Architect - Onshore

Choosing Capgemini means choosing a company where you will be empowered to shape your career in the way you’d like, where you’ll be supported and inspired by a collaborative community of colleagues around the world, and where you’ll be able to reimagine what’s possible. Join us and help the world’s leading organizations unlock the value of technology and build a more sustainable, more inclusive world.

This is a remote role based anywhere in the US. Ideally in a hub city with a Capgemini Office.

We are looking for an experienced Sr. AWS IAM Engineer to implement, manage, and scale enterprise Identity and Access Management (IAM) solutions across AWS environments. This role focuses on hands‑on engineering, automation, and standardization of IAM workloads, with a strong emphasis on IAM persona buildout for services, infrastructure‑as‑code modernization, and integration with Identity Directory / Identity Governance (IDC) platforms.

• Define and own enterprise IAM architecture for AWS
• Architect and standardize IAM personas for services, applications, and users
• Lead enterprise‑wide rollout of IAM persona frameworks across multi‑account environments
• Drive Cloud Formation → Terraform conversion of IAM roles, policies, and permissions
• Establish IAM design standards using least‑privilege, RBAC, and ABAC principles
• Architect integration between AWS IAM and IDC solutions, supporting identity lifecycle and governance
• Provide technical leadership, design guidance, and architectural reviews for IAM engineers

• Proven experience as an AWS IAM Architect in large‑scale enterprise environments
• Deep expertise in AWS IAM, including roles, policies, cross‑account access, and federation
• Strong experience with Terraform and IAM IaC standards
• Demonstrated success building and scaling IAM persona frameworks
• Hands‑on experience with IDC / Identity Governance integrations

• 5-8 years of experience with AWS Organizations, SCPs, and landing zones, Native AWS IAM tools
• Azure IAM experience (Azure AD / Microsoft Entra , RBAC, service principals, managed identities)

• CCSK, CCSP
• AWS Solutions Architect – Associate or higher

The base compensation range for this role in the posted location is: $70,176- $170,040.

Capgemini provides compensation range information in accordance with applicable national, state, provincial, and local pay transparency laws. The base compensation range listed for this position reflects the minimum and maximum target compensation Capgemini, in good faith, believes it may pay for the role at the time of this posting. This range may be subject to change as permitted by law.

The actual compensation offered to any candidate may fall outside of the posted range and will be determined based on multiple factors legally permitted in the applicable jurisdiction. These may include, but are not limited to:
Geographic location, Education and qualifications, Certifications and licenses, Relevant experience and skills, Seniority and performance, Market and business consideration, Internal pay equity.

It is not typical for candidates to be hired at or near the top of the posted compensation range.

In addition to base salary, this role may be eligible for additional compensation such as variable incentives, bonuses, or commissions, depending on the position and applicable laws.

Capgemini offers a comprehensive, non-negotiable benefits package to all regular, full-time employees. In the U.S. and Canada, available benefits are determined by local policy and eligibility and may include:

• Paid time off based on employee grade (A-F), defined by policy:
  Vacation: 12-25 days, depending on grade, Company paid holidays, Personal Days, Sick Leave
• Medical, dental, and vision coverage (or provincial healthcare coordination in Canada)
• Retirement savings plans (e.g., 401(k) in the U.S., RRSP in Canada)
• Life and disability insurance
• Employee assistance programs
• Other benefits as provided by local policy and eligibility

Compensation (including bonuses, commissions, or other forms of incentive pay) is not…