Note: The job is a remote job and is open to candidates in USA. Ensar Solutions Inc is seeking an AWS Platform Engineer / Cloud IAM Engineer to design, automate, and manage enterprise-scale AWS identity and access management solutions. The role focuses on implementing secure and scalable access management while supporting governance, compliance, and operational excellence.
Responsibilities
- Design, implement, and manage AWS IAM and IAM Identity Center solutions across enterprise multi-account AWS environments
- Build event-driven automation using Python, Lambda, Step Functions, EventBridge, Boto3, APIs, and reusable operational components
- Support governance-as-code and IAM automation using Git, CI/CD pipelines, CloudFormation, CDK, or Terraform with automated validation
- Maintain secure and scalable identity and access controls across multi-account AWS environments
- Automate IAM, governance, validation, and account management processes using reusable cloud components
- Develop IAM policies, permission boundaries, trust relationships, RBAC models, permission sets, and least-privilege access controls
- Manage AWS Organizations governance, including SCPs, RCPs, tag policies, backup policies, guardrails, and account lifecycle controls
- Configure and support AWS Control Tower, AWS Config, GuardDuty, CloudTrail, and Security Hub for governance and security posture monitoring
Skills
- 6 + years AWS platform / cloud / security engineering
- Hands-on experience with AWS Config, GuardDuty, CloudTrail, Security Hub, compliance monitoring, and automated remediation
- Strong understanding of least-privilege access, multi-account governance, identity controls, and secure cross-account permissions
- Ability to automate IAM, compliance validation, governance controls, and remediation workflows using Python and AWS serverless services
- Deep expertise in AWS IAM, IAM Identity Center, AWS Organizations, Control Tower, IAM policy language, policy evaluation logic, cross-account access, and permission boundaries
- Strong Python development skills with AWS Lambda, Step Functions, EventBridge, Boto3, APIs, and event-driven automation frameworks
- Experience with Git-based source control, CI/CD pipelines, and version-controlled IAM policies, permission sets, and governance configurations
- Experience implementing enterprise AWS Landing Zones, account vending, account onboarding, and governance automation across AWS Organizations
- Ability to implement version-controlled IAM, governance, and infrastructure configurations using CI/CD and Infrastructure as Code tools
- Preferred certifications include AWS Certified Solutions Architect – Associate or Professional, AWS Certified Security – Specialty, and AWS Certified DevOps Engineer – Professional
- Hands-on experience managing IAM Identity Center permission sets and automating account assignments through CI/CD pipelines
- Familiarity with Terraform, CloudFormation, AWS CDK, GitOps practices, compliance frameworks, and identity governance patterns
- Strong experience supporting multi-account AWS governance, identity management, and automated account provisioning
Company Overview
Company H1B Sponsorship