AWS Security & IAM Engineer

Quebec Solution Inc; United States; On-site; USD 110,000 - 170,000; Full time

Job summary

Quebec Solution Inc is seeking an AWS Security & IAM Engineer to design, implement, and manage secure identity and access governance across enterprise AWS environments, including healthcare workloads.

The role involves configuring IAM roles, cross-account access, federation (SAML/OIDC), Cognito for enterprise authentication, and MFA enforcement to support compliant, least-privilege access across services.

Qualifications

• Experience designing IAM architectures and access governance in AWS.
• Proven ability to implement MFA and least-privilege access.
• Experience with cross-account access and federation across enterprises.

Responsibilities

• Design AWS IAM architecture and access governance models.
• Configure IAM roles, policies, permission boundaries, and cross-account access.
• Implement Microsoft Entra ID federation using SAML and OIDC.
• Configure Amazon Cognito for enterprise authentication.
• Manage JWT validation, authorization policies, and role mappings.
• Design least-privilege access controls across AWS services.
• Implement MFA, privileged access management, and break-glass procedures.
• Support AWS STS, IAM Roles Anywhere, and workload identity federation.
• Review IAM policies and eliminate excessive permissions.
• Support audit, compliance, and security reviews.

Skills

AWS IAM

Identity & Access Management

Federation & SSO

MFA & PAM

Tools

Microsoft Entra ID

Amazon Cognito

JWT

SAML/OIDC

Job description

We are seeking an AWS Security & IAM Engineer to design, implement, and manage secure identity, federation, authorization, and access governance solutions across enterprise AWS environments supporting healthcare and regulated workloads.

Key Responsibilities

• Design AWS IAM architecture and access governance models.
• Configure IAM roles, policies, permission boundaries, and cross-account access.
• Implement Microsoft Entra ID federation using SAML and OIDC.
• Configure Amazon Cognito for enterprise authentication.
• Manage JWT validation, authorization policies, and role mappings.
• Design least-privilege access controls across AWS services.
• Implement MFA, privileged access management, and break-glass procedures.
• Support AWS STS, IAM Roles Anywhere, and workload identity federation.
• Review IAM policies and eliminate excessive permissions.
• Support audit, compliance, and security reviews.