Senior Architectural Engineer

Your tasks

• Design, implement, and manage AWS identity and access management policies, roles, and permissions to enforce least-privilege access across multi-account cloud environments.
• Conduct regular audits of IAM configurations and access controls to maintain alignment with relevant security frameworks and regulatory requirements, including NIST CSF, HITRUST, HIPAA, SOC 2, and GDPR.
• Automate identity provisioning and de-provisioning workflows using infrastructure-as-code and configuration management tools such as Terraform, CloudFormation, and Ansible.
• Troubleshoot IAM-related issues, including access failures, policy conflicts, authentication errors, and permission misconfigurations.
• Collaborate with security, networking, and application teams to incorporate identity and access management best practices into cloud architectures and deployments.
• Support security incident response and forensic investigations by analyzing identity activity, access patterns, and audit logs using AWS CloudTrail and Azure Monitor.
• Implement and manage AWS Organizations to support account governance and centralized administration.
• Configure and maintain AWS Control Tower guardrails and account provisioning processes to establish consistent cloud security controls.
• Support AWS Cognito implementations for identity federation and user authentication.
• Assist with Azure identity and access management activities, including conditional access policies, identity protection, and integration with Active Directory.
• Continuously improve cloud IAM governance, security controls, and operational processes to strengthen compliance and reduce access-related risks.

Requirements

• Bachelor's degree in Computer Science, Management Information Systems (MIS), or a related field, or equivalent professional experience.
• At least five years of cloud engineering experience, with a strong focus on identity and access management in AWS and/or Azure environments.
• Hands-on experience with AWS IAM, AWS Organizations, AWS Control Tower, and AWS Cognito.
• Practical experience with infrastructure-as-code tools, particularly Terraform and CloudFormation.
• Understanding of authentication and identity federation protocols, including SAML, OpenID Connect (OIDC), and OAuth 2.0.
• Knowledge of cloud security principles, access governance, least-privilege implementation, and identity lifecycle management.
• Familiarity with security and compliance frameworks, including NIST CSF, HITRUST, HIPAA, SOC 2, and GDPR.
• Experience troubleshooting cloud access issues and analyzing identity-related logs to support security investigations.
• Ability to collaborate effectively with security, networking, and application teams to implement secure cloud solutions.
• Strong analytical and problem-solving skills, with attention to detail and a commitment to maintaining secure, compliant environments.
• AWS or Azure security certifications are preferred, such as AWS Certified Security – Specialty or Microsoft Certified: Azure Security Engineer Associate.
• Willingness to travel occasionally, with expected travel of approximately 0–10%.
• Availability to use a video camera during all interviews and throughout the initial week of orientation.
• Application deadline: October 30, 2026.

What we offer

• Annual base salary: $76,100–$108,700, depending on geographic location, internal equity, job-related knowledge, skills, and experience.
• Remote work: Fully remote opportunity for candidates based in the United States.
• Flexible vacation policy: Generous and flexible vacation benefits for eligible full-time salaried employees.
• Retirement savings: 401(k) plan with employer matching.
• Healthcare coverage: Comprehensive health benefits.
• Educational assistance: Support for continued learning and professional development.
• Technical development: Access to technical and leadership development academies to strengthen skills and capabilities.
• Career growth: Opportunities to expand technical credentials and certifications while working on complex cloud security challenges.
• Limited travel: Occasional travel, with an expected range of 0–10%.

How to apply

How Jobgether works We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best! Why Apply Through Jobgether?

Other

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.