AWS Platform Engineer / Cloud IAM Engineer

Job Summary: Design, automate, and manage enterprise-scale AWS identity, access management, and multi-account governance solutions. The role focuses on AWS IAM, IAM Identity Center, AWS Organizations, Control Tower, and Python-based serverless automation to deliver secure, scalable access management while supporting governance, compliance, and operational excellence. Experience : 6

• years AWS platform / cloud / security engineering Automation : Python, Lambda, Step Functions, EventBridge, Boto3 Key Responsibilities: ● Design, implement, and manage AWS IAM and IAM Identity Center solutions across enterprise multi-account AWS environments. ● Build event-driven automation using Python, Lambda, Step Functions, EventBridge, Boto3, APIs, and reusable operational components. ● Support governance-as-code and IAM automation using Git, CI/CD pipelines, CloudFormation, CDK, or Terraform with automated validation. ● Maintain secure and scalable identity and access controls across multi-account AWS environments. ● Automate IAM, governance, validation, and account management processes using reusable cloud components. ● Develop IAM policies, permission boundaries, trust relationships, RBAC models, permission sets, and least-privilege access controls. ● Manage AWS Organizations governance, including SCPs, RCPs, tag policies, backup policies, guardrails, and account lifecycle controls. ● Configure and support AWS Control Tower, AWS Config, GuardDuty, CloudTrail, and Security Hub for governance and security posture monitoring. Required Skills: ● Hands-on experience with AWS Config, GuardDuty, CloudTrail, Security Hub, compliance monitoring, and automated remediation. ● Strong understanding of least-privilege access, multi-account governance, identity controls, and secure cross-account permissions. ● Ability to automate IAM, compliance validation, governance controls, and remediation workflows using Python and AWS serverless services. ● Deep expertise in AWS IAM, IAM Identity Center, AWS Organizations, Control Tower, IAM policy language, policy evaluation logic, cross-account access, and permission boundaries. ● Strong Python development skills with AWS Lambda, Step Functions, EventBridge, Boto3, APIs, and event-driven automation frameworks. ● Experience with Git-based source control, CI/CD pipelines, and version-controlled IAM policies, permission sets, and governance configurations. Preferred Qualifications / Certifications: ●  Experience implementing enterprise AWS Landing Zones, account vending, account onboarding, and governance automation across AWS Organizations. ● Ability to implement version-controlled IAM, governance, and infrastructure configurations using CI/CD and Infrastructure as Code tools. ● Preferred certifications include AWS Certified Solutions Architect – Associate or Professional, AWS Certified Security – Specialty, and AWS Certified DevOps Engineer – Professional. ● Hands-on experience managing IAM Identity Center permission sets and automating account assignments through CI/CD pipelines. ● Familiarity with Terraform, CloudFormation, AWS CDK, GitOps practices, compliance frameworks, and identity governance patterns. ● Strong experience supporting multi-account AWS governance, identity management, and automated account provisioning. Soft Skills: Strong problem-solving skills, independent ownership, and the ability to manage responsibilities with minimal supervision. Effective stakeholder communication and collaboration across security, governance, engineering, and business teams. Ability to translate security and governance requirements into secure, scalable, and practical AWS solutions.