Security Architect

Project Role : Security Architect

Project Role Description : Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations.

Must have skills : Amazon Web Services (AWS) Security

Good to have skills : NA
Minimum 3 year(s) of experience is required

Educational Qualification : 15 years full time education

Summary:
We are looking for an AWS IAM Engineer with 6 years of experience to provide L2/L3 operational support across IAM, SSO, MFA, RBAC, and PAM services. The role requires strong troubleshooting skills, a sound understanding of AWS identity services, and the ability to manage access policies, handle incidents, and deliver clear operational reporting.



Roles Responsibilities:

Provide L2 and L3 support for AWS IAM, IAM Identity Center (SSO), MFA, RBAC, and PAM resolving escalated incidents within agreed SLAs.

Maintain and configure AWS Directory Services (Managed Microsoft AD / AD Connector) in line with client requirements.

Create and manage conditional IAM policies, SCPs, and Permission Boundaries based on least-privilege and zero-trust principles.

Support incident management processes - log, triage, coordinate resolution, and communicate status updates to stakeholders.

Lead Root Cause Analysis (RCA) for major IAM incidents document findings and track corrective actions to closure.

Manage policies for PAM (credential vaulting, JIT access), SSO (SAML/OIDC federation), MFA enforcement, and RBAC entitlements.

Conduct regular access reviews and entitlement certification in line with compliance requirements.

Produce operational reports covering incident trends, SLA performance, policy changes, and IAM posture for management and audit audiences.

Professional Technical Skills:

6 years of hands-on AWS IAM experience: roles, policies, SCPs, Permission Boundaries, ABAC, and IAM Access Analyser.

AWS IAM Identity Center (SSO) IdP federation (Azure AD / Okta), SCIM provisioning, and application assignments.

AWS Directory Services Managed Microsoft AD and AD Connector administration.

MFA management: enrolment, enforcement policies, and exception handling.

PAM experience: AWS Systems Manager Session Manager and/or third-party tools (CyberArk, BeyondTrust, Delinea).

ITIL-aligned incident and problem management proficient with ITSM tools (ServiceNow or equivalent).

Scripting for automation and reporting: Python, AWS CLI, or PowerShell.

Preferred Certifications

AWS Certified Security Specialty

AWS Certified SysOps Administrator (Associate)

ITIL Foundation v4

The candidate should have minimum 6 years of experience in AWS Administration.

This position is based at our Bengaluru office.

A 15 years full time education is required.

Qualification 15 years full time education