Remote Cloud IAM Engineer - IaC & JIT Access

United States Digital Space LLC; United States; Remote; USD 107,000 - 114,000; Full time

Job summary

HealthEdge is seeking a Cloud IAM Operations Engineer to manage day-to-day identity and access provisioning across our AWS environment. This is a hands-on, execution-focused role; you'll review incoming access requests against least-privilege principles and implement approved access using Infrastructure as Code.

This role operates in alignment with established policy rather than defining it, and you'll partner closely with security architecture on escalations and edge cases.

Qualifications

• 2–4 years of cloud security, IAM, or cloud technologies in AWS.
• Experience with AWS IAM fundamentals (roles, policies, permission sets, least-privilege design).
• Strong interpersonal and communication skills for a people-facing role.
• Experience with Infrastructure as Code (CDK preferred; Pulumi or CloudFormation also considered).
• Understanding of access review and audit requirements in regulated environments.
• Experience implementing or administering Just-In-Time (JIT) access tools in a cloud environment.
• Strong attention to detail and documentation for access decision records.
• Basic scripting ability (Python, TypeScript, or similar).

Responsibilities

• Review AWS access requests against least-privilege and policy.
• Provision and implement access using Infrastructure as Code.
• Manage and maintain Just-In-Time access tooling for on-demand access.
• Maintain auditable records of grants, changes, and revocations.
• Identify requests outside policy and assist with risk reduction.
• Support access reviews and recertification processes.
• Contribute to runbooks and IAM documentation.
• Collaborate with security architecture on process improvements.

Skills

Cloud security

IAM fundamentals

Least-privilege design

Infrastructure as Code

JIT access management

Communication skills

Python/TypeScript scripting

Tools

CDK

Pulumi

CloudFormation

Job description

HealthEdge is seeking a Cloud IAM Operations Engineer to manage day-to-day identity and access provisioning across our AWS environment. This is a hands-on, execution-focused role; you'll review incoming access requests against least-privilege principles and implement approved access using Infrastructure as Code.

This role operates in alignment with established policy rather than defining it, and you'll partner closely with security architecture on escalations and edge cases.