IAM Specialist

Arctiq•Whitpain Township, PA

7d•Remote

About The Position

Arctiq is a global, intelligence-driven technology services company delivering professional and managed services across Hybrid Cloud Infrastructure, Networking & Connected Experiences, Cybersecurity, Data & AI, Autonomous Operations & Intelligence, and Enterprise Service Management. We help organizations operate, secure, and modernize complex environments by unifying infrastructure, networking, data, security, automation, and observability under a single, integrated operating model. Our work focuses on helping customers reduce operational friction, improve resilience, and make better, faster decisions as their environments evolve. Arctiq builds on decades of industry expertise and a customer-centric ethos to deliver exceptional value to clients across diverse industries. We are seeking a highly skilled and experienced technical professional to join our team to manage and oversee the integration of AWS and Azure services. The role will focus on implementing an inventory system for all approved services, including IAM resources and policies, and ensuring the security, efficiency, and consistency of our cloud operations. This is a remote contract opportunity with one of Arctiq's clients.

Requirements

Extensive experience with AWS and Azure services.
Thorough understanding of IAM resources, roles, policies, and best practices.
Proficiency in metadata tagging strategies and service access pattern development.
Experience with inventory tools like Wiz and credential management systems.
Strong documentation and process development skills.
Ability to provide strategic recommendations and design structured processes for cloud operations.

Nice To Haves

Relevant certifications in AWS and Azure.
Experience implementing and managing cloud infrastructure programs.
Strong communication and project management skills.

Responsibilities

Maintain an inventory of all approved AWS and Azure services.
Catalog IAM resources, differentiate between AWS control plane resources (roles, policies) and local resources.
Identify and inventory local data plane resources (user/keys/roles/policies/groups) and manage their credentials in vaults.
Ensure resource policies are applied across services.
Utilize tools like Wiz for inventory, reporting, and evidence collection, with correlation back to AWS/Azure documentation.
Identify and manage external dependencies, including secrets, keys, and policies.
Develop a comprehensive metadata tagging strategy mapped to ASL, environment, and repository association.
Define and document approved access patterns for services and users, aligning with predefined roles like Reader, Contributor, and Administrator.
Design and build modules for each service access pattern to be published in the service registry.
Ensure consistent enforcement of role/policy naming conventions, metadata, and parameters.
Customize module policies to accommodate unique use-cases.
Establish methods to correlate modules with service resource policies and user roles/policies.
Inventory and maintain controls pertinent to IAM and Cloud Standards for each service.
Develop methodologies to identify conditions for using "pre-approved" service registry modules via pipelines.
Define criteria for pre-approval and manual review processes, detailing the manual review procedure.
Formulate request and approval processes for new modules.
Outline the pre-approval process, including pipeline and approval authority.
Implement a "shift-left" strategy to proactively address IAM cloud operations staffing.
Document IAM configurations for pipelines and repositories.
Develop and maintain IAM SDLC documentation.
Offer recommendations on team structure, roles, skillsets, and resourcing needs.
Define the support structure, including Service Desk, Global Command Center, Cloud Operations, and Cloud Engineering.
Develop a comprehensive IAM Cloud program and define its functions.