> Markdown version of [/jobs/ext/3963380-iam-engineer-cloud-platform](https://www.wearedevelopers.com/jobs/ext/3963380-iam-engineer-cloud-platform). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# IAM Engineer - Cloud Platform

- **Company:** GuideWell Mutual Holding Corporation
- **Location:** New York, NY, United States
- **Experience:** Experienced
- **Salary:** $109,300.0 - $136,600.0
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, Microsoft Azure, Cloud Computing, Cloud Computing Security, Federated Identity Management, Identity and Access Management, Information Systems Security Architecture Professional, Python (Programming Language), Key Management, OpenID, Ping (Networking Utility), Security Assertion Markup Language (SAML), Software Engineering, Cloud Platform System, Okta, Cyberark, SailPoint, Terraform
- **Published:** October 27, 2026
- **Apply:** https://www.careerbuilder.com/job-details/iam-engineer-cloud-platform-new-york-ny--0c706e94-0c9f-497f-a692-2beabbb51a6e

## About the Role

Software Engineering, Cloud Computing, Cloud Computing, Microsoft Windows Azure, Amazon Web Services (AWS), Identity Federation, Security Assertion Markup Language (SAML), Professional License, CISSP - Certified Information Systems Security Professional, Healthcare, * 6+ years related work experience in IAM, security, or platform engineering, with 3+ years focused on cloud identity

 * Related Bachelor's degree required
 * Strong AWS/Azure IAM skills, including cross-account access, federation, and permission boundaries.
 * Hands-on experience with SSO and federation platforms.
 * Experience integrating an enterprise identity provider such as Okta, Entra ID, or Ping with cloud.
 * Hands-on Terraform.
 * Working knowledge of SAML, OIDC, and SCIM.
 * Experience in an environment governed by HIPAA, HITRUST, SOC 2, FedRAMP, or NIST 800-53.
 * Required to obtain Certified Information Systems Security Professional License (CISSP) within 180 Days of hire

What We Prefer

 * Identity engineering across a mix of GovCloud and commercial, including the cross-partition trust boundary.
 * Which partition was primary does not matter. Healthcare payer experience.
 * Privileged access management tooling such as CyberArk.
 * Identity governance and administration tooling such as SailPoint or Saviynt, and lifecycle automation.
 * Machine identity at scale, including workload federation and secrets management.
 * Python or equivalent scripting for identity automation.
 * Cloud Security Specialty, CCSP, or an identity-focused certification.