Role Overview
We are looking for a skilled AWS Cloud Security Engineer to support implementation of centralized AWS security and identity architecture including Control Tower, IAM Identity Center, and Entra ID/Okta integration.
Responsibilities
- Support AWS Organizations and Control Tower implementation
- Configure OUs, SCPs, guardrails and account onboarding
- Implement IAM Identity Center (SSO) with Entra ID / Okta (SAML, SCIM)
- Manage user lifecycle (provisioning/deprovisioning, MFA, RBAC)
- Enable centralized security services (Security Hub, GuardDuty, Inspector, Config)
- Configure centralized logging (CloudTrail, Config, S3, KMS)
- Set up monitoring and alerts (CloudWatch, Event Bridge, SNS)
- Support IAM migration from users to federated access
- Troubleshoot SSO, federation, and security service issues
- Assist in Terraform/IaC-based security automation
Requirements
- Hands-on AWS IAM, Organizations, IAM Identity Center, Control Tower experience
- Understanding of SAML, OAuth, OIDC, SCIM
- Experience with AWS security services
- Exposure to Entra ID and/or Okta integration
- Knowledge of cloud security best practices