SRE – Security / Identity Engineer / Observability
Location: US – Remote
Employment Type: Full-Time
Duration: 12+ Months
Job Description
We are seeking an experienced SRE – Security / Identity Engineer / Observability with strong expertise in AWS Identity & Security, cloud observability, multi-account governance, backend development, and Infrastructure as Code. The ideal candidate will have experience designing and automating highly scalable AWS environments across large enterprise multi-account ecosystems.
Key Responsibilities
Design, implement, and manage enterprise-scale AWS identity and access management solutions.
Configure and integrate AWS IAM Identity Center (IdC) with enterprise identity providers using SAML and OIDC federation.
Integrate AWS environments with existing enterprise federation and credential-vending models.
Implement Attribute-Based Access Control (ABAC) and fine-grained authorization using AWS Verified Permissions, Open Policy Agent (OPA), or similar policy engines.
Design and maintain enterprise cloud observability solutions using Amazon CloudWatch Metrics, Logs, Alarms, and Contributor Insights.
Implement CloudWatch cross-account observability/OAM, including source and sink configurations.
Build monitoring, auditing, and security visibility solutions using AWS CloudTrail and VPC Flow Logs.
Manage large-scale AWS environments using AWS Organizations, CloudFormation StackSets, organizational policies, and APIs.
Automate resource provisioning and governance across environments consisting of 15,000+ AWS accounts.
Develop high-performance backend services and REST APIs using Python, Java, or Go.
Build APIs and services capable of querying and processing CloudWatch, CloudTrail, and flow-log data.
Implement efficient caching, asynchronous processing, and data-fetching strategies for scalable backend services.
Develop and maintain Infrastructure as Code using Terraform or AWS CDK.
Build and maintain automated CI/CD pipelines, including GitLab CI, for infrastructure provisioning and application deployments.
Collaborate with Security, SRE, Platform Engineering, and Cloud Infrastructure teams to improve reliability, security, automation, and operational visibility.
Required Skills
Advanced AWS Identity & Security / IAM
AWS IAM Identity Center (IdC)
SAML / OIDC Federation
Attribute-Based Access Control (ABAC)
AWS Verified Permissions / Open Policy Agent (OPA)
Amazon CloudWatch – Metrics, Logs, Alarms & Contributor Insights
CloudWatch Cross-Account Observability / OAM
AWS CloudTrail & VPC Flow Logs
AWS Organizations
AWS CloudFormation StackSets
Large-scale AWS multi-account governance
Python, Java, or Go
REST API / Backend Service Development
Asynchronous processing & caching
Terraform or AWS CDK
GitLab CI / CI/CD
Infrastructure automation