Cloud IAM Engineer: AWS & GovCloud Identity Federation

WEB-TPA, Inc.; United States; Hybrid; USD 109,000 - 178,000; Full time

Benefits offered by this job

Medical/dental/vision

Retirement plan with employer match

Paid time off

Holidays and wellness days

Volunteer time off

Job summary

GuideWell seeks an IAM Engineer to own the cloud side of enterprise identity integration, including federation, entitlement design, and access governance across AWS/Azure GovCloud. You will design workload identity patterns, automate lifecycle events, and build recertification processes for audit readiness.

You will collaborate with application teams, onboard apps to SSO, and ensure alignment with HIPAA, HITRUST, SOC 2, FedRAMP, or NIST 800-53 controls.

Qualifications

• 6+ years of IAM/security/platform engineering experience, with 3+ years in cloud identity.
• Bachelor's degree required.
• Strong AWS/Azure IAM skills, cross-account access and federation.
• Hands-on with SSO/federation platforms and enterprise IdP integrations.
• Terraform experience; SAML, OIDC, SCIM knowledge.
• Experience in HIPAA/HITRUST/SOC 2/FedRAMP/NIST 800-53 environments.

Responsibilities

• Design and operate federation and entitlement model across accounts.
• Automate access lifecycle: joiner, mover, leaver.
• Build workload identity patterns and minimize long-lived keys.
• Establish access recertification and audit evidence.
• Onboard apps to SSO and review access designs with teams.
• Integrate cloud entitlements with identity governance platform.

Skills

IAM experience

AWS/Azure IAM

SSO & federation

Enterprise IdP integration

Terraform

SAML/OIDC/SCIM

HIPAA/HITRUST/NIST

Education

Bachelor's degree

Tools

Terraform

Okta

SailPoint

Saviynt

CyberArk

Job description

GuideWell seeks an IAM Engineer to own the cloud side of enterprise identity integration, including federation, entitlement design, and access governance across AWS/Azure GovCloud. You will design workload identity patterns, automate lifecycle events, and build recertification processes for audit readiness.

You will collaborate with application teams, onboard apps to SSO, and ensure alignment with HIPAA, HITRUST, SOC 2, FedRAMP, or NIST 800-53 controls.