Note: The job is a remote job and is open to candidates in USA. Diverse Lynx is seeking an AWS IAM/Platform Engineer to support enterprise cloud identity, access, and governance initiatives. The role designs and manages AWS IAM and IAM Identity Center solutions, develops governance and security automation, and implements infrastructure and policy controls across multi-account AWS environments.
Responsibilities
- Design, implement, and manage AWS IAM and IAM Identity Center solutions across enterprise multi-account AWS environments
- Develop IAM policies, permission boundaries, trust relationships, RBAC, permission sets, and least-privilege access models
- Manage AWS Organizations governance including SCPs, RCPs, tag policies, backup policies, guardrails, and account lifecycle controls
- Configure and support AWS Control Tower, AWS Config, GuardDuty, CloudTrail, and Security Hub for governance and security posture monitoring
- Build event-driven automation using Python, Lambda, Step Functions, EventBridge, Boto3, APIs, and reusable operational components
- Support governance-as-code and IAM automation through Git, CI/CD pipelines, CloudFormation, CDK, or Terraform with automated validation
Skills
- AWS IAM, IAM Identity Center (SSO), Identity Governance, RBAC, Access Management
- Terraform, Python Automation, Lambda, Step Functions, EventBridge, CI/CD
- Deep expertise in AWS IAM, IAM Identity Center, AWS Organizations, Control Tower, IAM policy language, evaluation logic, cross-account access, and permission boundaries
- Hands-on experience with AWS Config, GuardDuty, CloudTrail, Security Hub, compliance monitoring, and remediation automation
- Strong Python development skills with AWS Lambda, Step Functions, EventBridge, Boto3, APIs, and event-driven automation frameworks
- Experience with Git-based source control, CI/CD pipelines, version-controlled policies, permission sets, and governance configurations
- Strong problem-solving, Consultant ownership, stakeholder communication, and ability to translate security and governance requirements into scalable AWS solutions
- Experience implementing enterprise AWS Landing Zones, account vending, onboarding, and governance automation across AWS Organizations
- Hands-on IAM Identity Center permission set management and account assignment automation through CI/CD pipelines
- Familiarity with Terraform, CloudFormation, AWS CDK, GitOps approaches, compliance frameworks, and identity governance patterns
- Preferred certifications: AWS Solutions Architect Associate/Professional, AWS Security Specialty, AWS DevOps Engineer Professional
Company Overview
Company H1B Sponsorship