Cloud IAM Engineer – AWS GovCloud & Federation

GuideWell

Northern (KY)

Hybrid

USD 109,000 - 178,000

Full time

3 days ago

Be an early applicant

Application generator

Turn this role into an interview — a resume and cover letter built around what this employer wants.

Get past ATS filters

Benefits offered by this job

Medical insurance

Retirement plan

Paid time off

Job summary

GuideWell is migrating IAM to AWS across commercial and GovCloud partitions. The IAM Engineer owns identity in that environment, including federation from the enterprise IDP, access lifecycle into cloud accounts, and the authorization model used by application teams.

The role designs cloud entitlements, builds workload and machine identity patterns, and enables audit-ready recertification while collaborating with application teams to onboard and review SSO implementations.

Qualifications

6+ years in IAM, security, or platform engineering with a cloud-identity focus.
Bachelor's degree required.
Experience with SSO and federation platforms.
Experience integrating an enterprise IdP (Okta, Entra ID, Ping).
Hands-on Terraform experience.

Responsibilities

Design and operate federation and the entitlement model across AWS accounts.
Automate access lifecycle: joiner, mover, leaver.
Build workload identity patterns and reduce long-lived keys and standing access.
Create audit evidence and support access recertification.
Onboard applications to SSO and review access designs with teams.
Integrate cloud entitlements with the enterprise identity governance platform.