Principal IAM Architect | AWS Security & Authorization local to CA

• Contract

Hiring:
Principal IAM Architect | AWS Security & Authorization

Location: Remote – Los Angeles, CA (10% travel required for client workshops and meetings)
Duration: 3+ Months (Extension Possible)
Experience: 15+ Years

We are looking for an experienced Principal IAM Architect to lead identity and access management architecture, AWS security, authorization policies, and enterprise access controls. The ideal candidate will have strong hands-on experience designing secure IAM frameworks, implementing least-privilege access, and developing fine-grained authorization policies.

• Design and implement enterprise IAM architecture across AWS and cloud environments.
• Develop and manage AWS IAM roles, permission policies, trust policies, and reusable IAM policy templates.
• Implement fine-grained authorization using Cedar Policy Language and policy-based access controls.
• Define and enforce least-privilege access, role-based access control (RBAC), and attribute-based access control (ABAC).
• Integrate identity and authorization solutions using OAuth 2.0, OIDC, JWT, and identity federation.
• Automate IAM provisioning and policy deployment using Terraform, AWS CDK, or Cloud Formation.
• Establish security controls for APIs, service identities, workloads, and AI-enabled applications.
• Collaborate with cloud security, application development, Dev Sec Ops , and enterprise architecture teams.
• Implement security validation, policy testing, audit logging, and continuous compliance controls.

• 15+ years of experience in IT, cloud security, IAM architecture, or enterprise security.
• Strong hands-on experience with AWS IAM, roles, policies, permissions, and least-privilege access.
• Experience developing IAM policy templates and reusable authorization frameworks.
• Knowledge or hands-on experience with Cedar Policy Language and fine-grained authorization.
• Strong understanding of RBAC, ABAC, identity federation, OAuth 2.0, OIDC, and JWT.
• Experience with Terraform, AWS CDK, or Cloud Formation.
• Knowledge of secure API integrations, identity governance, and cloud security best practices.
• Experience with CI/CD security automation and policy validation.

• Experience securing AI applications, AI agents, and tool-based integrations.
• Familiarity with AWS Bedrock and Agent Core identity or gateway capabilities.
• Experience with Python, Git Hub Actions, and security automation.
• Knowledge of policy-as-code and authorization testing frameworks.

All your information will be kept confidential according to EEO guidelines.