Cloud IAM Architect, VP

The Cloud IAM Architect is a senior architecture role responsible for defining authorization and access patterns for cloud platforms, with a primary focus on AWS and multi‑account environments. This role ensures cloud platforms conform to global IAM standards while enabling secure, scalable, and auditable access across multiple accounts, environments, and regions.

• Cloud Authorization Architecture
• Define and govern AWS IAM Identity Center architecture and permission‑set standards.
• Establish global role design patterns (e.g., reader, operator, administrator) aligned to least privilege.
• Drive evolution of authorization models from RBAC toward ABAC / PBAC where appropriate.
• Multi‑Account & Multi‑Region Access
• Architect secure cross‑account access strategies in AWS Organizations and Control Tower environments.
• Ensure permission models respect Service Control Policies (SCPs) and organizational guardrails.
• Design environments‑specific access patterns (sandbox, development, staging, production).
• Infrastructure‑as‑Code & Platform Enablement
• Define Terraform‑based IAM patterns for permission sets, role assignments, and policy enforcement.
• Integrate IAM standards into AWS Control Tower and account‑vending workflows.
• Partner with platform and Dev Sec Ops  teams to embed IAM by design.
• Governance, Metrics & Risk Alignment
• Partners with IAM Governance teams to define and consume cloud IAM metrics, including role reuse, exception volume, and privilege concentration.
• Ensure cloud authorization models are auditable, regulator‑defensible, and consistent across regions.
• Provide architectural guidance and review for cloud onboarding initiatives.

• A senior cloud authorization architecture role
• Focused on standards, patterns, and scale
• Closely aligned with platform engineering and security architecture
• This role is not:
• A cloud access provisioning or ticket‑based role
• A generic IAM or directory services position
• A single‑account or single‑team solution owner

• Required Skills (Must Have)
• Cloud IAM & Authorization
• Deep experience designing AWS IAM authorization models in multi‑account environments.
• Strong hands‑on architectural knowledge of AWS IAM Identity Center and permission sets.
• Expertise in RBAC design, with working knowledge of ABAC / PBAC concepts.
• AWS Organizations & Governance
• Experience with AWS Organizations, SCPs, and permission boundaries.
• Understanding of Control Tower landing zone governance and inheritance models.
• Infrastructure as Code
• Experience designing IAM solutions using Terraform or equivalent IaC tools.
• Ability to standardize and template IAM controls for repeatable use.
• Architecture & Communication
• Strong ability to define reusable patterns and influence adoption across teams.
• Experience collaborating with cloud engineering, platform, security, and audit stakeholders.

• Experience operating IAM in regulated or highly controlled environments.
• Familiarity with environment‑specific role design (dev vs. sandbox vs. prod).
• Experience integrating workforce identity (e.g., Entra ) with cloud authorization.
• Experience defining or consuming IAM metrics to drive continuous improvement.

• Exposure to multi‑cloud IAM concepts beyond AWS.
• Familiarity with Dev Sec Ops  or platform engineering operating models.
• Relevant cloud or security certifications (e.g., AWS, security architecture).

• Consistent, reusable cloud authorization patterns adopted across accounts and regions
• Reduced permission sprawl and fewer manual access exceptions
• Clear auditability of cloud access decisions
• Secure scale without slowing down delivery teams

• Cloud platforms scale faster than traditional controls. This role ensures cloud access scales securely, consistently, and defensibly, enabling the business while preventing long‑term identity and authorization debt.

• Bachelor's degree in Computer Science or a closely‑related discipline, or an equivalent combination of formal education and experience.

The typical base pay range for this role is between $180k - $220k depending on location and…