Cloud IAM Engineer: Federation & Access Automation

Socket.dev; United States; Hybrid; USD 109,000 - 178,000; Full time

Job summary

GuideWell is seeking an IAM Engineer to own cloud identity in AWS across commercial and GovCloud. You will design federation, automate access lifecycle, and craft entitlement models across accounts, while integrating with the enterprise governance platform.

The role requires hands-on Terraform, cross-account access, and SSO experience, with a focus on secure, scalable identity patterns in a HIPAA/HITRUST regulated environment. Hybrid work is offered.

Qualifications

• 6+ years related work experience in IAM, security, or platform engineering, with 3+ years focused on cloud identity.
• Related Bachelor's degree required
• Hands-on Terraform
• Hands-on experience with SSO and federation platforms
• Experience integrating an enterprise identity provider with cloud
• Knowledge of HIPAA, HITRUST, SOC 2, FedRAMP, or NIST 800-53

Responsibilities

• Design and operate federation and the entitlement model across accounts
• Automate access lifecycle: joiner, mover, leaver
• Build workload identity patterns; eliminate long-lived keys and standing access
• Build access recertification and produce audit evidence
• Onboard applications to SSO and review access designs with application teams
• Integrate cloud entitlements with the enterprise identity governance platform
• Build access recertification for cloud entitlements and produce evidence for audit
• Design workload and machine identity patterns, including roles for services and OIDC for pipelines

Skills

IAM

Cloud identity

Federation

SSO

Terraform

SAML

OIDC

NIST 800-53

Education

Bachelor's degree

Tools

Okta

Entra ID

Ping Identity

SailPoint

Saviynt

CyberArk

Job description

GuideWell is seeking an IAM Engineer to own cloud identity in AWS across commercial and GovCloud. You will design federation, automate access lifecycle, and craft entitlement models across accounts, while integrating with the enterprise governance platform.

The role requires hands-on Terraform, cross-account access, and SSO experience, with a focus on secure, scalable identity patterns in a HIPAA/HITRUST regulated environment. Hybrid work is offered.