Hiring: Principal IAM Architect | AWS Security & Authorization | 15+ Years | local to CA only

Technology Management Solutions LLC; Los Angeles (CA); Remote; USD 165,000 - 248,000; Part time

Job summary

Technology Management Solutions LLC in Los Angeles, CA is seeking a Principal IAM Architect with 15+ years of IT and cloud security experience to own enterprise IAM, AWS security, authorization policies, and governance.

The role emphasizes least-privilege design, Cedar policy language, RBAC/ABAC, OAuth/OIDC/JWT, and infrastructure as code with Terraform, AWS CDK or CloudFormation, collaborating with security, DevOps, and development teams.

Qualifications

• 15+ years of IT, cloud security, IAM architecture, or enterprise security.
• Strong hands-on experience with AWS IAM, roles, policies, permissions, and least-privilege access.
• Experience developing IAM policy templates and reusable authorization frameworks.
• Knowledge or hands-on experience with Cedar Policy Language and fine-grained authorization.
• Strong understanding of RBAC, ABAC, identity federation, OAuth 2.0, OIDC, and JWT.
• Experience with Terraform, AWS CDK, or CloudFormation.
• Knowledge of secure API integrations, identity governance, and cloud security best practices.
• Experience with CI/CD security automation and policy validation.

Responsibilities

• Design and implement enterprise IAM architecture across AWS and cloud environments.
• Develop and manage AWS IAM roles, permission policies, trust policies, and reusable IAM policy templates.
• Implement fine-grained authorization using Cedar Policy Language and policy-based access controls.
• Define and enforce least-privilege access, RBAC, and ABAC.
• Integrate identity and authorization solutions using OAuth 2.0, OIDC, JWT, and identity federation.
• Automate IAM provisioning and policy deployment using Terraform, AWS CDK, or CloudFormation.
• Establish security controls for APIs, service identities, workloads, and AI-enabled applications.
• Collaborate with cloud security, application development, DevSecOps, and enterprise architecture teams.
• Implement security validation, policy testing, audit logging, and continuous compliance controls.

Skills

AWS IAM

IAM policies

Least-privilege

Cedar policy

RBAC/ABAC

OAuth / OIDC / JWT

Identity federation

Terraform

AWS CDK

CloudFormation

Policy testing

CI/CD security

API security

Tools

Terraform

AWS CDK

CloudFormation

Job description

Hiring: Principal IAM Architect | AWS Security & Authorization | 15+ Years | local to CA only

• Contract

Hiring: Principal IAM Architect | AWS Security & Authorization

Location: Remote – Los Angeles, CA (10% travel required for client workshops and meetings)
Duration: 3+ Months (Extension Possible)
Experience: 15+ Years

We are looking for an experienced Principal IAM Architect to lead identity and access management architecture, AWS security, authorization policies, and enterprise access controls. The ideal candidate will have strong hands-on experience designing secure IAM frameworks, implementing least-privilege access, and developing fine-grained authorization policies.

Key Responsibilities

• Design and implement enterprise IAM architecture across AWS and cloud environments.
• Develop and manage AWS IAM roles, permission policies, trust policies, and reusable IAM policy templates.
• Implement fine-grained authorization using Cedar Policy Language and policy-based access controls.
• Define and enforce least-privilege access, role-based access control (RBAC), and attribute-based access control (ABAC).
• Integrate identity and authorization solutions using OAuth 2.0, OIDC, JWT, and identity federation.
• Automate IAM provisioning and policy deployment using Terraform, AWS CDK, or CloudFormation.
• Establish security controls for APIs, service identities, workloads, and AI-enabled applications.
• Collaborate with cloud security, application development, DevSecOps, and enterprise architecture teams.
• Implement security validation, policy testing, audit logging, and continuous compliance controls.

Required Skills

• 15+ years of experience in IT, cloud security, IAM architecture, or enterprise security.
• Strong hands-on experience with AWS IAM, roles, policies, permissions, and least-privilege access.
• Experience developing IAM policy templates and reusable authorization frameworks.
• Knowledge or hands-on experience with Cedar Policy Language and fine-grained authorization.
• Strong understanding of RBAC, ABAC, identity federation, OAuth 2.0, OIDC, and JWT.
• Experience with Terraform, AWS CDK, or CloudFormation.
• Knowledge of secure API integrations, identity governance, and cloud security best practices.
• Experience with CI/CD security automation and policy validation.

Preferred Qualifications

• Experience securing AI applications, AI agents, and tool-based integrations.
• Familiarity with AWS Bedrock and AgentCore identity or gateway capabilities.
• Experience with Python, GitHub Actions, and security automation.
• Knowledge of policy-as-code and authorization testing frameworks.

All your information will be kept confidential according to EEO guidelines.