Cloud IAM/PAM Specialist, AWS
Role description
The IAM/PAM Specialist will own enterprise identity lifecycle management activities (provisioning, recertification, Privileged Access Management etc.) across all 5 entities within the USA regarding the AWS cloud environments. Create IAM Cloud Solutions following DevOps pipeline processes and drive new integrations of applications and data configurations. The ideal person will be able to provide system administration and manage IAM environments, such as apply patches, data migrations, etc.
Primary Duties & Responsibilities:
- Provide deep subject matter expertise for AWS Identity & Access Management services, entities, configuration, and best practices.
- Develop any required automation necessary to build, test, deploy, manage, or maintain IAM Cloud Solutions following DevOps pipeline processes.
- Manage and maintain any AWS IAM roles, policies, and other configurations required to support business requirements, application integrations, workloads, regulatory compliance, and other cloud platform efforts or deliverables.
- Provide knowledge leadership in the evolution of our governance, control framework and our IAM Cloud Solution strategy while leading automation of IAM related process regarding workforce management events of onboarding/offboarding/transfers/access requests.
- Design, Develop and Operate IAM controls regarding access controls and certifications following our framework while working with Cyber Security Operations and other stakeholders to implement monitoring processes and correlation of events regarding digital identities.
- Collaborate with various groups and individuals to troubleshoot and resolve escalated production issues in addition to guiding the setup of New Access rules and participate in Log Analysis for the Creation/Modification & Deletion of User accounts.
- Ensure adherence to Corporate IAM policy and the execution of the Access Controls designed.
Education & Qualifications:
- Bachelor's degree is required
- Bilingual in English & Spanish (written, verbal) is a must
- AWS Certified Cloud Engineer Certified is required
- 6-7+ years' experience within Identity Access Management (IAM), permissions, digital identities, Information Security, PAM and/or data access
- Minimum 1 year experience managing or supporting AWS security, with expertise in IAM service
- Proficiency with access control, including role mining and design, domain controllers, and group policy management is a must
- Must have strong AWS experience (AWS identity & Access Management services, entities, configuration, and best practices)
- Experience with automation development skills to build, test, deploy, manage, or maintain IAM Cloud Solutions following DevOps pipeline processes
- Python experience (or equivalent programming experience)
- Policy and role management skills managing multiple projects, tasks, and deadlines
Desired Requirements (Not Mandatory):
- Experience with threat detection for IAM
- SailPoint operations or development experience