> Markdown version of [/jobs/ext/2609985-cloud-iam-engineer](https://www.wearedevelopers.com/jobs/ext/2609985-cloud-iam-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cloud IAM Engineer - **Company:** Healthedge Software, Inc. - **Location:** United States (Remote available) - **Experience:** Experienced - **Salary:** $107,000.0 - $114,000.0 - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Cloud Computing, Cloud Computing Security, Cyber Security, Identity and Access Management, Python (Programming Language), TypeScript, Pulumi, Cloudformation, Infrastructure Automation Frameworks - **Published:** August 3, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=df2ab8ee2ad639fd ## About the Role 2-4 years of experience in cloud security, IAM, or cloud technologies in AWS Working experience with AWS IAM fundamentals (roles, policies, permission sets, least-privilege design) This is a people-facing role, and the ideal candidate will bring strong interpersonal and communication skills alongside relevant technical experience. Working experience with Infrastructure as Code (CDK preferred; Pulumi, or CloudFormation also considered) Understanding of access review and audit requirements in a regulated environment Working experience implementing or administering Just-In-Time (JIT) access management tools in a cloud environment, with a strong understanding of least-privilege access principles and standing-access risk reduction Strong attention to detail and sound judgment on what access should and shouldn't be granted Clear written communication for documentation and access decision records Preferred Experience Experience in a healthcare or other regulated industry (HIPAA/HITRUST - aware) Familiarity with identity governance tooling and access certification workflows Basic scripting ability (Python, TypeScript, or similar) to support IaC workflows ## Description We're seeking a Cloud IAM Operations Engineer to manage day-to-day identity and access provisioning across our AWS environment. This is a hands-on, execution-focused role; you'll review incoming access requests against least-privilege principles and implement approved access using Infrastructure as Code. This role operates in alignment with established policy rather than defining it, and you'll partner closely with security architecture on escalations and edge cases. Responsibilities: * Review AWS access requests against least-privilege and organizational access policy * Provision and implement approved access using Infrastructure as Code (CDK preferred; or similar IaC tools considered) * Manage and maintain the organization's Just-In-Time (JIT) access management tool, ensuring all human-use AWS access is provisioned on-demand through JIT workflows rather than persistent permissions, reinforcing least-privilege and audit readiness * Maintain accurate, auditable records of access grants, changes, and revocations * Identify and escalate access requests that fall outside standard policy or carry elevated risk * Support periodic access reviews and recertification processes * Contribute to runbooks and documentation to improve consistency and repeatability of the access request lifecycle * Partner with security architecture and IAM leadership on process improvements and automation opportunities * Conduct periodic reviews of AWS IAM permission sets using IAM Access Analyzer and other tooling to identify unused permissions and overly permissive policies, refining access controls to align with least-privilege principles across the environments. ## Related Videos - [Why segmenting your infrastructure into tiers makes your infrastructure design better](https://www.wearedevelopers.com/videos/1960-why-segmenting-your-infrastructure-into-tiers-makes-your-infrastructure-design-better) - [30 powerful AWS hacks in just 30 minutes: Boost your developer productivity](https://www.wearedevelopers.com/videos/1624-30-powerful-aws-hacks-in-just-30-minutes-boost-your-developer-productivity) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Do TypeScript without TypeScript](https://www.wearedevelopers.com/videos/327-do-typescript-without-typescript) - [Unleashing Potential Across Teams: The Power of Infrastructure as Code](https://www.wearedevelopers.com/videos/930-unleashing-potential-across-teams-the-power-of-infrastructure-as-code) - [Terraform for Developers](https://www.wearedevelopers.com/videos/3-terraform-for-developers) ## Related Articles - [7 Cloud Computing Trends Coming in 2025 for Developers](https://www.wearedevelopers.com/magazine/412-7-cloud-computing-trends-coming-in-2025-for-developers) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Got AI ideas but no money? Here are 10 free ways to level up your AI skills with Google Cloud](https://www.wearedevelopers.com/magazine/600-got-ai-ideas-but-no-money-here-are-10-free-ways-to-level-up-your-ai-skills-with-google-cloud) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Navigating the AI Shift](https://www.wearedevelopers.com/magazine/629-navigating-the-ai-shift) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)