Enterprise AWS Identity & Access Migration Lead

ASM Research, An Accenture Federal Services Company

Tallahassee (FL)

On-site

USD 170,000 - 180,000

Full time

38 hours ago

Be an early applicant

Application generator

A complete application in a minute — tailored resume and cover letter, ready to send.

Get past ATS filters

Job summary

ASM Research, An Accenture Federal Services Company seeks an AWS Identity Engineer to lead a large-scale migration of identity and access management across an enterprise cloud environment. The role standardizes identity services across AWS accounts, consolidates legacy providers, and strengthens secure access for users, applications, and service accounts.

The hands-on engineer will plan, implement, validate, and cutover migrations for Active Directory domains, Windows and Linux workloads, and

Qualifications

Bachelor’s degree in Computer Science, Information Technology, Engineering, Cybersecurity, or a related field; equivalent relevant experience may be considered.
At least 12 years of progressive IT experience, including 5+ years of cloud engineering experience and at least 3 years of hands-on identity and access management experience supporting enterprise-scale environments.
Professional-level cloud certification in AWS, Microsoft Azure, Oracle Cloud Infrastructure, or Google Cloud Platform.
Expert-level experience with AWS Identity and Access Management, cloud account access controls, identity federation, security groups, and cloud-native identity services.
Deep technical knowledge of Microsoft Active Directory, LDAP, domain consolidation and migration, Group Policy Object administration, and identity integration across cloud, server, and workstation environments.
Demonstrated experience planning and executing complex identity, domain, user, group, role, and service-account migrations with comprehensive validation testing and cutover management.
At least 5 years of experience administering or troubleshooting Windows and Linux operating systems in an engineering, support, or systems administration capacity.
U.S. citizenship is required.

Responsibilities

Lead the technical execution of an enterprise AWS identity standardization initiative, including migration of AWS account console access to a unified identity provider and domain model.
Design and execute the consolidation of multiple legacy identity providers into a single enterprise identity platform, ensuring secure and reliable user authentication and access continuity.
Plan and manage Active Directory and domain migration activities for Windows and Linux EC2 instances, including identity-provider mapping, domain integration, and access validation.
Map, migrate, and validate users, groups, roles, permissions, and service accounts across approximately 20 cloud accounts while preserving appropriate least-privilege access controls.
Oversee AWS WorkSpaces rebuild and migration activities in coordination with the WorkSpaces support team, ensuring alignment to the target identity provider and operational requirements.
Configure, deploy, and maintain Group Policy Objects for Windows WorkSpaces and EC2 instances in partnership with infrastructure and operations teams.
Develop and execute detailed migration runbooks, cutover plans, rollback procedures, validation criteria, and post-cutover support processes to minimize risk and prevent business disruption.
Provide technical leadership, stakeholder communication, and cross-functional coordination throughout migration planning, implementation, testing, issue resolution, and transition to operations.