IAM Developer
Job description
Job Summary:
We are seeking a skilled IAM Developer to design, implement, and manage secure identity and access management solutions across our cloud and enterprise environments. The ideal candidate has hands-on experience with AWS IAM, cloud security best practices, and scripting/automation for access provisioning and policy management.
Key Responsibilities:
· Design and implement IAM policies, roles, groups, and users in AWS and/or enterprise environments.
· Automate access provisioning/deprovisioning processes using Infrastructure as Code (IaC) tools (CloudFormation, Terraform, AWS CDK).
· Develop and maintain custom scripts or tools to manage IAM configurations (using Python, Bash, or PowerShell).
· Integrate federated identity providers (SAML, OIDC, OAuth2) for single sign-on (SSO) and cross-account access.
· Collaborate with application, security, and DevOps teams to enforce least-privilege access control.
· Perform IAM audits, role reviews, and access recertification.
· Use tools like IAM Access Analyzer, AWS Config, and CloudTrail for compliance and security insights.
· Support incident response related to identity/access issues.
· Monitor, analyze, and respond to IAM-related vulnerabilities and security risks.
Required Skills & Qualifications:
· Bachelor's degree in Computer Science, Cybersecurity, or related field (or equivalent experience).
· 3+ years of experience working with IAM services in AWS or other major cloud providers (Azure AD, GCP IAM).
· Strong understanding of IAM policy syntax (JSON) and access control principles (RBAC, ABAC, least privilege).
· Experience with AWS STS, Trust Policies, and Role Assumption.
· Proficient in scripting with Python, Bash, or PowerShell.
· Experience with CI/CD pipelines, automation tools, and Git-based workflows.
· Familiarity with federation standards (SAML 2.0, OIDC).
Preferred Qualifications (Nice to Have):
· AWS certification (e.g., AWS Certified Security – Specialty, Solutions Architect).
· Experience with IAM Identity Center (AWS SSO) or Azure Active Directory.
· Knowledge of Terraform, Ansible, or other IaC tools.
· Familiarity with Zero Trust security models.
Exposure to SIEM tools, IAM governance platforms (e.g., SailPoint, Okta), or Privileged Access Management (PAM) solutions.