IAM Architect/Designer (AWS & PAM)

Skills Required: IAM Security with strong PAM and AWS specialization, * IAM Architect with 10+ years of experience in Identity & Access Management (IAM) or Cloud Security with strong specialization in AWS and Privileged Access Management (PAM).

• Strong expertise in AWS Identity & Access Management, AWS Organizations, Service Control Policies (SCPs), AWS IAM Identity Center, federation, Single Sign-On (SSO), and Multi-Factor Authentication (MFA).
• Hands-on experience with PAM platforms such as CyberArk, Delinea/Centrify, or BeyondTrust, including privileged account governance, Just-in-Time (JIT) access, secrets management, credential lifecycle management and privileged session management.
• Experience designing and implementing secure cloud identity architectures, privileged access frameworks and access governance capabilities.
• Proven ability to integrate cloud and enterprise identity ecosystems across authentication, authorization, and access governance domains.
• Strong understanding of least privilege principles, Role-Based Access Control (RBAC), identity lifecycle management, entitlement governance, compliance requirements, and security best practices.
• Working knowledge of Microsoft Entra ID, Enterprise Application onboarding and integration, Identity Governance & Administration (IGA), hybrid identity architectures, and modern identity federation concepts.
• Experience supporting enterprise-scale cloud and hybrid environments while collaborating with security, infrastructure, and application teams.
• Strong stakeholder management, solution design, technical consulting, and architectural governance capabilities.
• Experience supporting compliance, audit readiness, and security governance requirements for IAM and PAM programs.
• AWS, IAM, PAM related certifications preferred.

Secondary Skills

Exposure to Okta, Active Directory (AD), and SailPoint would be highly desirable.