IAM Engineer – AWS Security

Role : IAM Engineer - AWS Security

Location : Remote (Preferred : Raleigh, NC)

We are seeking an experienced IAM Engineer with deep expertise in AWS security services, Identity and Access Management (IAM), and cloud compliance frameworks. This role will own and strengthen the security posture of the AWS platform, implement preventive guardrails, and ensure continuous compliance through automation.

• Own and maintain the overall AWS security posture, ensuring alignment with industry compliance standards
• Design, implement, and manage IAM policies, SCPs, and security controls across multiple AWS accounts
• Configure and manage AWS security services including:
  • AWS Config
  • Guard Duty
  • Security Hub
  • Macie
  • KMS (Key Management Service)
• Automate security controls and evidence collection for compliance frameworks such as:
  • PCI DSS
  • SOC 2
  • ISO 27001
• Perform security reviews, identify gaps, and drive remediation activities
• Collaborate with platform, Dev Ops, and compliance teams to enforce secure cloud architecture

• AWS Security Services:
  Strong hands‑on experience with AWS native security tools
• IAM:
  Deep expertise in IAM roles, policies, permission boundaries, SCPs
• Encryption & Key Management: KMS, PKI concepts, encryption at rest and in transit
• Compliance Frameworks:
  Practical experience supporting audits and regulatory requirements
• Infrastructure as Code:
  Terraform for security automation and policy enforcement
• Security Tooling:
  Experience with tools such as Qualys (or similar vulnerability scanners)

• Experience with Cloud Control Matrix (CCM)
• Exposure to multi‑account AWS environments and landing zone architectures
• Strong documentation and audit‑readiness mindset
• Experience working in regulated or enterprise cloud environments