Lead AWS IAM Engineer

An employer is seeking a remote AWS IAM Engineer for a direct hire opportunity. This individual will be a dedicated resource on a AWS IAM operations team. The team currently sits at 10 employees that is likely to grow as the year progresses. This candidate will engineer and deploy AWS IAM resources including u , groups, roles, and policies using AWS CloudFormation templates and following Cloud IAM team processes and procedures • Day-to-day delivery of the AWS IAM configuration required to support business requirements, application integrations, workloads, regulatory compliance, and all other platform efforts or deliverables • Actively monitor and respond accordingly to AWS IAM configuration changes, events, and alerts following applicable CIE team process and procedures • Evaluates existing AWS IAM permission policies and adjust them as needed to enforce principle of least privilege. • Ensure effective security protection controls and hardening requirements are in place for all AWS IAM resources • Ensure all AWS IAM resources and configuration adhere to and compliant with all Synchrony policies/standards, industry best practices/benchmarks, and regulatory requirements • Participates in Agile teams ceremonies. • Updates assigned Jira stories daily as required by the Agile team to provide status and next steps. • Ensures service requests contain proper approvals and documentation prior to starting the work and deconflicts discrepancies with the CIE Service Management Lead. • Creates new or updates existing CFN templates per requirements outlined in the service requests and Agile stories.

Actively (immediately on the same day) coordinates with the CIE Service Management Lead to resolve conflicting requirements or unclear information in Jira stories or service requests. • Ensures principle of least privilege is implemented in every template policy prior to creating Pull Requests. • Ensures security controls are implemented in the CFN templates as required to ensure we maintain a secured Cloud IAM posture. • Troubleshoots CFN template syntax errors and escalates to the CIE Service Management Lead as needed to ensure same day resolution. • Troubleshoots errors logged in in the CFN StackSets Stack Instance or Operations tabs as needed to advance the fulfillment of service requests. • Follows process documentation to ensure proper governance and request to implementation traceability is in place. • Performs AWS IAM compliance event follow-up and remediation with account owners to resolve event conditions.

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to HR@insightglobal.com .

To learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/ .

Required Skills & Experience

Strong experience engineering and deploying AWS IAM resources including u , groups, roles, and policies
Strong AWS CloudFormation experience
Jira experience
Bitbucket
ITIL understanding

Nice to Have Skills & Experience

AWS Certified Security Specialty Certification

Benefit packages for this role will start on the 31st day of employment and include medical, dental, and vision insurance, as well as HSA, FSA, and DCFSA account options, and 401k retirement account access with employer matching. Employees in this role are also entitled to paid sick leave and/or other paid time off as provided by applicable law.