Sr. AWS IAM Engineer
About The Position
Capgemini is seeking an experienced Sr. AWS IAM Engineer to implement, manage, and scale enterprise Identity and Access Management (IAM) solutions across AWS environments. The role emphasizes hands-on engineering, automation, and standardization of IAM workloads, including IAM persona development for services, infrastructure-as-code modernization, and integration with Identity Directory / Identity Governance (IDC) platforms. The position is remote and can be based anywhere in the United States; a hub city with a Capgemini office is preferred. The role provides technical leadership and architectural guidance for enterprise AWS IAM initiatives across multi-account environments. The posted base compensation range is $99,220–$159,680. The role may also be eligible for variable incentives, bonuses, or commissions, depending on the position and applicable laws. Capgemini offers eligible regular, full-time employees benefits that may include paid time off, company-paid holidays, personal days, sick leave, medical, dental, and vision coverage, retirement savings plans, life and disability insurance, and employee assistance programs. Benefits depend on local policy and eligibility.
Requirements
- Proven experience as an AWS IAM Architect in large-scale enterprise environments.
- Deep expertise in AWS IAM, including roles, policies, cross-account access, and federation.
- Strong experience with Terraform and IAM infrastructure-as-code standards.
- Demonstrated success building and scaling IAM persona frameworks.
- Hands-on experience with IDC / Identity Governance integrations.
- 5–8 years of experience with AWS Organizations, SCPs, and landing zones, and native AWS IAM tools.
- Azure IAM experience, including Azure AD / Microsoft Entra ID, RBAC, service principals, and managed identities.
Nice To Haves
- CCSK or CCSP certification.
- AWS Solutions Architect – Associate certification or higher.
Responsibilities
- Define and own enterprise IAM architecture for AWS.
- Architect and standardize IAM personas for services, applications, and users.
- Lead enterprise-wide rollout of IAM persona frameworks across multi-account environments.
- Drive conversion of IAM roles, policies, and permissions from CloudFormation to Terraform.
- Establish IAM design standards using least-privilege, RBAC, and ABAC principles.
- Architect integration between AWS IAM and IDC solutions, supporting identity lifecycle and governance.
- Provide technical leadership, design guidance, and architectural reviews for IAM engineers.
Benefits
- Paid time off, including vacation (12–25 days depending on employee grade), company-paid holidays, personal days, and sick leave.
- Medical, dental, and vision coverage (or provincial healthcare coordination in Canada).
- Retirement savings plans, such as a 401(k) in the U.S. or RRSP in Canada.
- Life and disability insurance.
- Employee assistance programs.
- Other benefits as provided by local policy and eligibility.
- Potential eligibility for variable incentives, bonuses, or commissions.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
