Principal IAM Architect
Job Description
Hiring: Principal IAM Architect | AWS Security & Authorization 📍 Location: Remote – Los Angeles, CA (10% travel required for client workshops and meetings) 📅 Duration: 3+ Months (Extension Possible) 💼 Experience: 15+ Years We are looking for an experienced Principal IAM Architect to lead identity and access management architecture, AWS security, authorization policies, and enterprise access controls. The ideal candidate will have strong hands-on experience designing secure IAM frameworks, implementing least-privilege access, and developing fine-grained authorization policies.
Key Responsibilities
Design and implement enterprise IAM architecture across AWS and cloud environments. Develop and manage AWS IAM roles, permission policies, trust policies, and reusable IAM policy templates. Implement fine-grained authorization using Cedar Policy Language and policy-based access controls. Define and enforce least-privilege access, role-based access control (RBAC), and attribute-based access control (ABAC). Integrate identity and authorization solutions using OAuth 2.0, OIDC, JWT, and identity federation. Automate IAM provisioning and policy deployment using Terraform, AWS CDK, or CloudFormation. Establish security controls for APIs, service identities, workloads, and AI-enabled applications. Collaborate with cloud security, application development, DevSecOps, and enterprise architecture teams. Implement security validation, policy testing, audit logging, and continuous compliance controls. Required Skills 15+ years of experience in IT, cloud security, IAM architecture, or enterprise security. Strong hands-on experience with AWS IAM, roles, policies, permissions, and least-privilege access. Experience developing IAM policy templates and reusable authorization frameworks. Knowledge or hands-on experience with Cedar Policy Language and fine-grained authorization. Strong understanding of RBAC, ABAC, identity federation, OAuth 2.0, OIDC, and JWT. Experience with Terraform, AWS CDK, or CloudFormation. Knowledge of secure API integrations, identity governance, and cloud security best practices. Experience with CI/CD security automation and policy validation.
Preferred Qualifications
Experience securing AI applications, AI agents, and tool-based integrations. Familiarity with AWS Bedrock and AgentCore identity or gateway capabilities. Experience with Python, GitHub Actions, and security automation. Knowledge of policy-as-code and authorization testing frameworks. Additional Information All your information will be kept confidential according to EEO guidelines.