Lead AWS Identity & Access Migration Engineer

asmexternalcareersite; United States; Remote; USD 150,000 - 230,000; Full time

Job summary

ASM Research seeks an AWS Identity Engineer to lead a large-scale migration to a unified enterprise identity platform across cloud accounts and services. You will standardize identity services, consolidate legacy providers, and strengthen secure access for users, apps, and service accounts.

The role combines hands-on design, planning, validation, and cutover activities, coordinating with cloud operations, security, and stakeholder teams to deliver scalable identity solutions with measurable risk

Qualifications

• Bachelor’s degree or equivalent experience in a related field.
• At least 12 years IT experience with 5+ years cloud engineering.
• 3+ years hands-on IAM experience for enterprise environments.
• Pro level AWS IAM, identity federation, and access controls.
• Experience with Windows and Linux AD domain migrations.

Responsibilities

• Lead the technical execution of an enterprise AWS identity standardization initiative across ~20 cloud accounts.
• Design and consolidate legacy identity providers into a single enterprise platform.
• Plan and manage Active Directory/domain migration for Windows and Linux EC2 instances.
• Map, migrate, and validate users, groups, roles, and service accounts with least-privilege access.
• Oversee WorkSpaces rebuilds and migrations aligned to identity provider requirements.
• Configure and maintain Group Policy Objects for Windows Workspaces and EC2 instances.
• Develop migration runbooks, cutover plans, rollback procedures, and post-cutover support.
• Provide technical leadership and cross-functional coordination throughout migration lifecycle.

Skills

AWS IAM

Identity federation

Active Directory

Domain migration planning

Stakeholder coordination

Education

Bachelor’s degree in Computer Science, IT, Engineering, Cybersecurity

Tools

Group Policy Objects

WorkSpaces

LDAP

Job description

ASM Research seeks an AWS Identity Engineer to lead a large-scale migration to a unified enterprise identity platform across cloud accounts and services. You will standardize identity services, consolidate legacy providers, and strengthen secure access for users, apps, and service accounts.

The role combines hands-on design, planning, validation, and cutover activities, coordinating with cloud operations, security, and stakeholder teams to deliver scalable identity solutions with measurable risk