AWS IAM Engineer

Description

Role: AWS IAM / Cloud IAM Engineer

Location: Charlotte, NC

Rate: $85 - $89/hour W2

Target Job Titles:

• AWS IAM Engineer
• Cloud IAM Engineer
• SSO / IAM SME

Project DetailsThis is an ongoing team project focused on designing and implementing secure identity and access solutions within AWS and cloud environments.

The team is looking for an engineer who can go beyond traditional ticket-based IAM support and design solutions that improve security, access control, and automation. Examples include creating temporary access/token mechanisms that automatically expire after a defined period, such as 5 minutes, rather than providing persistent access.

What This Person Will Do

• Design and implement AWS IAM and cloud identity solutions.
• Develop secure, temporary-access solutions using tokens, permissions, and expiration mechanisms.
• Help architect solutions rather than simply processing IAM tickets.
• Work with SSO and federation technologies, particularly PingFederate.
• Apply cloud identity and access-management best practices to AWS environments.
• Partner with technical teams to understand access requirements and develop secure solutions.
• Support identity and access requirements for emerging AWS services and GenAI technologies.

Must-Haves / Required Skills

• Strong AWS expertise - must be an AWS Subject Matter Expert.
• Strong hands-on Cloud IAM / Identity & Access Management experience.
• Strong understanding of AWS IAM, including permissions, roles, policies, and access controls.
• Strong SSO / federation experience.
• Hands-on experience with PingFederate is required.
• Understanding of Amazon Bedrock and how it integrates with AWS IAM to control and secure access to AI models and services.
• Experience designing secure identity solutions rather than only performing ticket-based IAM administration.
• Strong cloud security and identity concepts.

Nice-to-Haves

• Amazon Bedrock experience or strong working knowledge of AWS's GenAI platform.
• Experience with Amazon Bedrock API Keys and related access/security mechanisms.
• Cloud identity security experience.
• Experience designing temporary or short-lived access/token solutions.
• Prior enterprise banking or financial services experience
• Experience securing access to AI/GenAI services within AWS.

Key TechnologiesCloud: AWS, Amazon Bedrock

Identity & Access: AWS IAM, Cloud IAM, Identity Security

SSO / Federation: PingFederate

GenAI: Amazon Bedrock, Bedrock APIs / API Keys