AWS Security & IAM Engineer

Ilantus Services Private Limited; Dallas (TX); Hybrid; USD 110,000 - 140,000; Full time

Job summary

Ilantus Services Private Limited is seeking an AWS Security & IAM Engineer for a 12-month Hybrid role in Dallas, TX. The engineer will design, implement and support secure IAM solutions, focusing on least-privilege, privileged access, and governance, while leveraging automation and DevSecOps practices.

The role demands strong Python scripting, IaC (Terraform/CloudFormation), and experience with multi-account AWS environments, IAM operations, and CI/CD tooling.

Qualifications

• Experience designing and implementing AWS IAM solutions with least-privilege access.
• Strong scripting and automation capabilities for IAM workflows.
• Hands-on IAM operations in multi-account AWS environments.
• Familiarity with IaC for IAM provisioning and governance.

Responsibilities

• Manage AWS IAM users, roles, policies, and access controls.
• Implement least privilege and privileged access controls.
• Monitor and remediate IAM security risks and policy violations.
• Automate provisioning, reporting, and governance using Python and AWS tools.
• Support access reviews, certifications, and compliance requirements.
• Configure IAM monitoring, logging, and alerting.
• Collaborate with security and application teams for secure access.
• Enforce IAM standards, governance policies, and security best practices.
• Optimize IAM processes to improve security and efficiency.

Skills

AWS IAM

Python scripting

Automation

Least privilege

Multi-account AWS

Security governance

SCPs and permission boundaries

CI/CD tooling

Linux shell

Networking basics

Git / version control

Tools

Terraform

CloudFormation

AWS CLI

Jenkins

GitLab

Boto3

Job description

Requirement:

AWS Security & IAM Engineer

Hybrid (Dallas, TX)

12 Months

Responsible for designing, implementing, and supporting secure AWS Identity and Access Management (IAM) solutions, including user lifecycle management, privileged access controls, and governance. Leverages automation and DevSecOps practices to strengthen security, improve compliance, streamline access management processes, and reduce operational effort.

Key Responsibilities

• Manage and support AWS IAM users, roles, policies, and access controls
• Implement and maintain least-privilege and privileged access controls
• Monitor and remediate IAM security risks, policy violations, and access issues
• Automate IAM provisioning, reporting, and governance using Python and AWS tools
• Support access reviews, certifications, and compliance requirements
• Configure IAM security monitoring, logging, and alerting
• Collaborate with security and application teams to enable secure access management
• Enforce IAM standards, governance policies, and security best practices
• Optimize IAM processes to improve security and operational efficiency

Required Skills:

• Strong knowledge of AWS cloud security, IAM, and least-privilege access models
• Strong Python scripting and automation skills for IAM processes, workflows, and API integrations using Python (Boto3), AWS CLI, or similar tools
• Hands-on experience with Infrastructure as Code (Terraform / CloudFormation) for IAM and resource provisioning
• Experience with access governance, including SCPs, permission boundaries, and least privilege models
• Experience working in multi-account AWS environments (Organizations / Control Tower)
• Strong hands-on experience with AWS IAM operations (roles, policies, access troubleshooting)
• Hands-on experience with CI/CD tools (Jenkins, GitLab, or similar)
• Good understanding of Linux systems and shell scripting
• Knowledge of Docker and Kubernetes
• Knowledge of networking concepts (VPC, subnets, security groups, routing)
• Familiarity with Git and version control workflows

Nice to Have

• Experience with IAM access request and approval workflows
• Knowledge of identity lifecycle management (joiner, mover, leaver processes)
• Knowledge of access reviews, certifications, and compliance audits
• Experience with ServiceNow, Jira, or other ticketing platforms and change management process
• Experience supporting enterprise-scale IAM environments across multiple applications and teams
• Familiarity with identity governance and administration (IGA) concepts
• Understanding of security monitoring, audit logs, and SIEM integrations
• Experience with privileged access management (PAM) solutions
• Knowledge of IAM reporting, risk remediation, and compliance tracking
• Ability to identify and automate repetitive IAM operational tasks
• Understanding of cloud IAM security best practices and governance controls