[Remote] Cloud IAM Engineer

Note: The job is a remote job and is open to candidates in USA. HealthEdge provides AI-powered operational infrastructure and healthcare technology for health insurance companies, supporting payer operations, care management, and member engagement. The Cloud IAM Operations Engineer will manage day-to-day identity and access provisioning across AWS, implement approved access using Infrastructure as Code, administer just-in-time access workflows, and support access reviews, audit readiness, and security process improvements.

Responsibilities

• Review AWS access requests against least-privilege and organizational access policy
• Provision and implement approved access using Infrastructure as Code (CDK preferred; or similar IaC tools considered)
• Manage and maintain the organization's Just-In-Time (JIT) access management tool, ensuring all human-use AWS access is provisioned on-demand through JIT workflows rather than persistent permissions, reinforcing least-privilege and audit readiness
• Maintain accurate, auditable records of access grants, changes, and revocations
• Identify and escalate access requests that fall outside standard policy or carry elevated risk
• Support periodic access reviews and recertification processes
• Contribute to runbooks and documentation to improve consistency and repeatability of the access request lifecycle
• Partner with security architecture and IAM leadership on process improvements and automation opportunities
• Conduct periodic reviews of AWS IAM permission sets using IAM Access Analyzer and other tooling to identify unused permissions and overly permissive policies, refining access controls to align with least-privilege principles across the environments

Skills

• 24 years of experience in cloud security, IAM, or cloud technologies in AWS
• Working experience with AWS IAM fundamentals (roles, policies, permission sets, leastprivilege design)
• This is a people-facing role, and the ideal candidate will bring strong interpersonal and communication skills alongside relevant technical experience
• Working experience with Infrastructure as Code (CDK preferred; Pulumi, or CloudFormation also considered)
• Understanding of access review and audit requirements in a regulated environment
• Working experience implementing or administering Just-In-Time (JIT) access management tools in a cloud environment, with a strong understanding of least-privilege access principles and standing-access risk reduction
• Strong attention to detail and sound judgment on what access should and shouldn't be granted
• Clear written communication for documentation and access decision records
• Remote, US
• Work across multiple time zones in a hybrid or remote work environment
• Long periods of time sitting and/or standing in front of a computer using video technology
• May require travel dependent on company needs
• Experience in a healthcare or other regulated industry (HIPAA/HITRUST-aware)
• Familiarity with identity governance tooling and access certification workflows
• Basic scripting ability (Python, TypeScript, or similar) to support IaC workflows

Benefits

• Remote work arrangement
• HealthEdge is committed to an inclusive workplace where every employee has the opportunity to belong, make an impact, and do the best work of their career.

Company Overview

Company H1B Sponsorship