[Hiring] AWS IAM Engineer @Capgemini

Role Description

We are looking for an experienced AWS IAM Engineer to implement, manage, and scale enterprise Identity and Access Management (IAM) solutions across AWS environments. This role focuses on hands-on engineering, automation, and standardization of IAM workloads, with a strong emphasis on:

• IAM persona buildout for services
• Infrastructure-as-code modernization
• Integration with Identity Directory / Identity Governance (IDC) platforms

Your Role

• IAM Engineering & Operations
  • Engineer and maintain AWS IAM workloads across multi-account environments
  • Build, configure, and manage IAM roles, policies, permission boundaries, and trust relationships for human and service identities
  • Implement least-privilege access models using RBAC and ABAC principles
  • Troubleshoot and resolve IAM-related access and permission issues
• IAM Persona Buildout & Enterprise Rollout
  • Design and implement IAM personas for services, applications, and platform workloads
  • Support enterprise-scale rollout of standardized IAM personas across development, staging, and production environments
  • Ensure IAM persona consistency, reusability, and compliance across teams and accounts
  • Partner with security, platform, and application teams to onboard services to approved IAM models
• Infrastructure as Code & Migration
  • Convert and modernize CloudFormation-based IAM roles and policies to Terraform
  • Engineer Terraform modules for reusable IAM components (roles, policies, instance profiles, service roles)
  • Maintain and enhance Terraform pipelines for IAM deployments
  • Support migration activities from legacy IAM implementations (e.g., CNF or bespoke frameworks) to Terraform
• Identity Directory / Identity Governance (IDC)
  • Integrate AWS IAM with IDC solutions for identity lifecycle management
  • Engineer IAM workflows supporting identity provisioning, deprovisioning, and access reviews
  • Support federation and identity synchronization between AWS and IDC platforms
  • Assist with audit readiness, compliance reporting, and governance controls

Qualifications

• Experience with AWS IAM solutions
• Strong understanding of IAM principles and best practices
• Proficiency in Terraform and CloudFormation
• Experience with identity lifecycle management
• Ability to troubleshoot IAM-related issues

Requirements

• Location: Remote role based in the USA
• Base compensation range: $70,176 - $144,100
• Factors influencing compensation: Geographic location, Education and qualifications, Certifications and licenses, Relevant experience and skills, Seniority and performance, Market and business considerations, Internal pay equity

Benefits

• Paid time off based on employee grade (A-F): Vacation: 12-25 days, Company paid holidays, Personal Days, Sick Leave
• Medical, dental, and vision coverage (or provincial healthcare coordination in Canada)
• Retirement savings plans (e.g., 401(k) in the U.S., RRSP in Canada)
• Life and disability insurance
• Employee assistance programs
• Other benefits as provided by local policy and eligibility