AWS Cloud Services Architect with strong IAM experience to optimize cloud a cloud environment a[...]

S.i. Systems; London; On-site; GBP 80,000 - 100,000; Full time

Job summary

A global technology firm in London seeks an experienced AWS Cloud Services Architect to optimize cloud governance and IAM processes. The role requires expertise in IAM architecture, policy management, and AWS tools. Candidates with AWS certifications and strong analytical skills are preferred. This position offers the opportunity to work on cloud improvement projects for a leading organization.

Responsibilities

• Optimize IAM architecture, processes, policies, and governance.
• Author and troubleshoot IAM policies; debug using AWS tools.
• Automate IAM resource creation and policy management.

Skills

AWS Cloud Services Architect

IAM architecture

Policies and governance

IAM Users, Groups, and Roles

IAM policies authoring

Permission boundaries

Resource-Based Policies

Principle of Least Privilege

Education

AWS Certified Security – Specialty

AWS Certified Solutions Architect

Tools

AWS CloudFormation

Terraform

AWS CLI

Boto3

Job description

Social network you want to login/join with:

AWS Cloud Services Architect with strong IAM experience to optimize cloud a cloud environment and improve processes, policies and governance for a global organization, London

col-narrow-left

Client:

S.i. Systems

Location:

London, United Kingdom

Job Category:

Other

-

EU work permit required:

Yes

col-narrow-right

Job Reference:

caf340cd1ad4

Job Views:

10

Posted:

12.08.2025

Expiry Date:

26.09.2025

col-wide

Job Description:

Our global client is seeking AWS Cloud Services Architect with strong IAM experience to optimize their cloud environment and improve processes, policies, and governance.

Must Have:

• Experience as a AWS Cloud Services Architect optimizing IAM architecture, processes, policies, and governance.
• Experience with IAM Users, Groups, and Roles including creating, managing, and assigning permissions, organizing into groups, and leveraging roles for access.
• Skilled at authoring and troubleshooting IAM policies, including inline and managed policies, and policies attached to users, groups, and roles.
• Understanding how to use permission boundaries to set maximum permissions for roles and users.
• Resource-Based Policies: Familiarity with policies attached directly to AWS resources like S3 buckets, Lambda functions, etc.
• Principle of Least Privilege: Ability to architect and maintain least-privilege access at scale.

Nice to have:

• AWS Certified Security – Specialty or AWS Certified Solutions Architect

Scope:

• Understand complex JSON-based IAM policies, including conditions, resource-level permissions, and the use of wildcards or variables.
• Interpret and analyze policy evaluation logic, including Allow and Deny statements, explicit vs. implicit denies, and conflicts.
• Debug policies using AWS Policy Simulator and CloudTrail logs to resolve access issues.
• Utilize service control policies (SCPs) in AWS Organizations for governance across accounts.
• Automate IAM resource creation and policy management using AWS CloudFormation, Terraform, or AWS CDK.
• Design reusable templates and modules for IAM roles, policies, and permission sets.
• Use AWS CLI, SDKs (like Boto3), and automation tools for managing IAM at scale.
• Build workflows for provisioning, de-provisioning, and rotating credentials.
• Set up and analyze AWS CloudTrail logs for IAM activity monitoring.
• Configure AWS Config rules for compliance and drift detection.
• Communicate IAM concepts clearly to technical and non-technical audiences.
• Collaborate with security, compliance, operations, and application teams.
• Document policies, processes, and incident response plans.