Cloud IAM Engineer
$107,000–$114,000 year
RemoteUnited States
Job Summary
Review AWS access requests against least-privilege and organizational policy, then provision approved access using Infrastructure as Code. Manage the Just-In-Time access management tool to ensure on-demand provisioning and maintain accurate, auditable records of all grants and revocations. Identify high-risk or non-compliant requests for escalation and conduct periodic reviews of permission sets using IAM Access Analyzer to refine controls. Partner with security architecture on process improvements, access reviews, and documentation enhancements. This hands-on role supports HealthEdge's mission to modernize healthcare payer operations through secure, automated identity governance within the AWS environment.
Required Qualifications
- 2–4 years of experience in cloud security, IAM, or cloud technologies in AWS
- Working experience with AWS IAM fundamentals (roles, policies, permission sets, least-privilege design)
- Working experience with Infrastructure as Code (CDK preferred; Pulumi, or CloudFormation also considered)
- Understanding of access review and audit requirements in a regulated environment
- Working experience implementing or administering Just-In-Time (JIT) access management tools in a cloud environment, with a strong understanding of least-privilege access principles and standing-access risk reduction
- Strong attention to detail and sound judgment on what access should and shouldn't be granted
- Clear written communication for documentation and access decision records
- Working experience in a healthcare or other regulated industry (HIPAA/HITRUST - aware)
- Familiarity with identity governance tooling and access certification workflows
- Basic scripting ability (Python, TypeScript, or similar) to support IaC workflows
Desired Qualifications
- Experience in a healthcare or other regulated industry (HIPAA/HITRUST - aware)
- Familiarity with identity governance tooling and access certification workflows
- Basic scripting ability (Python, TypeScript, or similar) to support IaC workflows
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.