Cloud IAM Engineer — AWS, IaC, JIT Access (Remote)

HealthEdge; United States; On-site; USD 107,000 - 114,000; Full time

Job summary

HealthEdge in the United States is hiring a Cloud IAM Operations Engineer to manage day-to-day identity provisioning across our AWS environment. This hands-on role focuses on least-privilege access and implementing access using Infrastructure as Code.

You will partner with security architecture on escalations, maintain auditable access records, and support periodic reviews while contributing to runbooks and automation opportunities.

Qualifications

• 2–4 years of experience in cloud security, IAM, or AWS.
• Experience with AWS IAM fundamentals (roles, policies, permission sets).
• Strong interpersonal and communication skills.
• Experience with Infrastructure as Code (CDK preferred; Pulumi, or CloudFormation).
• Understanding of access review and audit requirements in a regulated environment.
• Experience implementing or administering Just-In-Time (JIT) access management tools.

Responsibilities

• Review and assess AWS access requests against least-privilege and policy.
• Provision and implement access using Infrastructure as Code (CDK preferred).
• Manage Just-In-Time (JIT) access tooling and ensure on-demand provisioning.
• Maintain auditable records of access grants, changes, and revocations.
• Escalate requests outside standard policy or with elevated risk.
• Support periodic access reviews and recertification processes.
• Contribute to runbooks and documentation for repeatable access lifecycle.
• Collaborate with security architecture on process improvements and automation.

Skills

Cloud security

IAM

Interpersonal skills

Infrastructure as Code

JIT access

Access governance

Tools

AWS CDK

Pulumi

CloudFormation

Job description

HealthEdge in the United States is hiring a Cloud IAM Operations Engineer to manage day-to-day identity provisioning across our AWS environment. This hands-on role focuses on least-privilege access and implementing access using Infrastructure as Code.

You will partner with security architecture on escalations, maintain auditable access records, and support periodic reviews while contributing to runbooks and automation opportunities.