AWS IAM Engineer

The Matlen Silver Group, Inc.; Charlotte (NC); On-site; USD 117,000 - 123,000; Full time

Job summary

The Matlen Silver Group, Inc. in Charlotte, NC seeks an AWS IAM / Cloud IAM Engineer to design and implement secure identity solutions in AWS and cloud environments, focusing on automation and short-lived access mechanisms.

Expect hands-on work beyond ticketing, with SSO, PingFederate, Bedrock integration, and best-practice IAM security across AWS services and GenAI platforms.

Qualifications

• Strong AWS expertise — must be an AWS Subject Matter Expert.
• Strong hands-on Cloud IAM / Identity & Access Management experience.
• Strong understanding of AWS IAM, including permissions, roles, policies, and access controls.
• Strong SSO / federation experience.
• Hands-on experience with PingFederate is required.
• Understanding of Amazon Bedrock and how it integrates with AWS IAM to control and secure access to AI models and services.
• Experience designing secure identity solutions rather than only performing ticket-based IAM administration.
• Strong cloud security and identity concepts.

Responsibilities

• Design and implement AWS IAM and cloud identity solutions.
• Develop secure, temporary-access solutions using tokens, permissions, and expiration mechanisms.
• Help architect solutions rather than simply processing IAM tickets.
• Work with SSO and federation technologies, particularly PingFederate.
• Apply cloud identity and access-management best practices to AWS environments.
• Partner with technical teams to understand access requirements and develop secure solutions.
• Support identity and access requirements for emerging AWS services and GenAI technologies.

Skills

AWS expert

Cloud IAM / IAM

AWS IAM

SSO / federation

PingFederate

Bedrock integration

Security concepts

Identity design

Tools

PingFederate

Amazon Bedrock

Job description

Role: AWS IAM / Cloud IAM Engineer
Location: Charlotte, NC
Rate: $85 - $89/hour W2

Target Job Titles:

• AWS IAM Engineer
• Cloud IAM Engineer
• SSO / IAM SME

Project DetailsThis is an ongoing team project focused on designing and implementing secure identity and access solutions within AWS and cloud environments.
The team is looking for an engineer who can go beyond traditional ticket-based IAM support and design solutions that improve security, access control, and automation. Examples include creating temporary access/token mechanisms that automatically expire after a defined period, such as 5 minutes, rather than providing persistent access.
What This Person Will Do

• Design and implement AWS IAM and cloud identity solutions.
• Develop secure, temporary-access solutions using tokens, permissions, and expiration mechanisms.
• Help architect solutions rather than simply processing IAM tickets.
• Work with SSO and federation technologies, particularly PingFederate.
• Apply cloud identity and access-management best practices to AWS environments.
• Partner with technical teams to understand access requirements and develop secure solutions.
• Support identity and access requirements for emerging AWS services and GenAI technologies.

Must-Haves / Required Skills

• Strong AWS expertise — must be an AWS Subject Matter Expert.
• Strong hands-on Cloud IAM / Identity & Access Management experience.
• Strong understanding of AWS IAM, including permissions, roles, policies, and access controls.
• Strong SSO / federation experience.
• Hands-on experience with PingFederate is required.
• Understanding of Amazon Bedrock and how it integrates with AWS IAM to control and secure access to AI models and services.
• Experience designing secure identity solutions rather than only performing ticket-based IAM administration.
• Strong cloud security and identity concepts.

Nice-to-Haves

• Amazon Bedrock experience or strong working knowledge of AWS's GenAI platform.
• Experience with Amazon Bedrock API Keys and related access/security mechanisms.
• Cloud identity security experience.
• Experience designing temporary or short-lived access/token solutions.
• Prior enterprise banking or financial services experience
• Experience securing access to AI/GenAI services within AWS.

Key TechnologiesCloud: AWS, Amazon Bedrock
Identity & Access: AWS IAM, Cloud IAM, Identity Security
SSO / Federation: PingFederate
GenAI: Amazon Bedrock, Bedrock APIs / API Keys