AWS Cloud Security​/IAM Lead

Qualifications

• 8–12 years of experience in cloud security, IAM, or infrastructure security engineering, preferably within BFSI or regulated enterprises.
• Strong hands‑on expertise in AWS security services, including:
  • AWS Organizations & multi-account governance
  • AWS Identity Center (SSO)
  • AWS KMS, Secrets Manager
  • AWS Cloud Trail, Config, Guard Duty, Security Hub
• Deep understanding of IAM design and governance, including:
  • Role-based and attribute-based access control (RBAC/ABAC)
  • Least privilege model implementation
  • Identity lifecycle management (joiner/mover/leaver)
• Experience integrating AWS IAM with enterprise identity providers such as:
  • Okta or similar IdP platforms

• Own the design and implementation of enterprise-wide AWS IAM strategy across multi-account environments.
• Define and enforce least‑privilege access models, including role‑based and attribute‑based controls.
• Lead integration of AWS IAM with enterprise identity providers (Azure AD/Okta), ensuring secure SSO and federation.
• Establish and maintain IAM governance processes, including access reviews, certification, and audit readiness.

• Monitor and respond to security alerts across AWS using tools such as Guard Duty, Security Hub, and Cloud Watch.
• Investigate and remediate IAM‑related security risks, misconfigurations, and access issues.
• Oversee logging and monitoring strategy using Cloud Trail, Config, and centralized SIEM integrations.
• Collaborate with Sec Ops teams to ensure timely incident response and root cause analysis.

• Manage user access lifecycle (provisioning, deprovisioning, entitlement reviews) across AWS environments.
• Ensure compliance with regulatory and enterprise security standards (NIST, CIS benchmarks, etc.).
• Conduct periodic access audits and enforce remediation of policy violations.
• Support internal and external audits by providing IAM evidence and controls documentation.

• Define and implement security guardrails using AWS Organizations, SCPs, and automation frameworks.
• Partner with platform and application teams to embed security‑by‑design principles.
• Drive adoption of policy‑as‑code and automated compliance checks in CI/CD pipelines.
• Provide architectural guidance for secure onboarding of new workloads and services on AWS.