Security Architect

Project Role : Security Architect

Project Role Description : Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations.

Must have skills : Amazon Web Services (AWS) Security

Good to have skills : NA

Minimum 3 Year(s) Of Experience Is Required

Educational Qualification : 15 years full time education

Summary:

We are looking for an AWS IAM Engineer with 6 years of experience to provide L2/L3 operational support across IAM, SSO, MFA, RBAC, and PAM services. The role requires strong troubleshooting skills, a sound understanding of AWS identity services, and the ability to manage access policies, handle incidents, and deliver clear operational reporting.

Roles & Responsibilities:

• Provide L2 and L3 support for AWS IAM, IAM Identity Center (SSO), MFA, RBAC, and PAM resolving escalated incidents within agreed SLAs.
• Maintain and configure AWS Directory Services (Managed Microsoft AD / AD Connector) in line with client requirements.
• Create and manage conditional IAM policies, SCPs, and Permission Boundaries based on least-privilege and zero-trust principles.
• Support incident management processes — log, triage, coordinate resolution, and communicate status updates to stakeholders.
• Lead Root Cause Analysis (RCA) for major IAM incidents document findings and track corrective actions to closure.
• Manage policies for PAM (credential vaulting, JIT access), SSO (SAML/OIDC federation), MFA enforcement, and RBAC entitlements.
• Conduct regular access reviews and entitlement certification in line with compliance requirements.
• Produce operational reports covering incident trends, SLA performance, policy changes, and IAM posture for management and audit audiences.
  
  

Professional & Technical Skills:

• 6 years of hands-on AWS IAM experience: roles, policies, SCPs, Permission Boundaries, ABAC, and IAM Access Analyser.
• AWS IAM Identity Center (SSO) IdP federation (Azure AD / Okta), SCIM provisioning, and application assignments.
• AWS Directory Services Managed Microsoft AD and AD Connector administration.
• MFA management: enrolment, enforcement policies, and exception handling.
• PAM experience: AWS Systems Manager Session Manager and/or third-party tools (CyberArk, BeyondTrust, Delinea).
• ITIL-aligned incident and problem management proficient with ITSM tools (ServiceNow or equivalent).
• Scripting for automation and reporting: Python, AWS CLI, or PowerShell.
• Preferred Certifications
• AWS Certified Security Specialty
• AWS Certified SysOps Administrator (Associate)
• ITIL Foundation v4
  
  

Additional Information:

• The candidate should have minimum 6 years of experience in AWS Administration.
• This position is based at our Bengaluru office.
• A 15 years full time education is required.