Senior AWS Identity and Access Migration Lead

ASM Research, An Accenture Federal Services Company; Des Moines (IA); On-site; USD 170,000 - 180,000; Full time

Job summary

ASM Research, an Accenture Federal Services company, seeks an AWS Identity Engineer to lead an enterprise IAM migration across a large cloud environment. Standardize identity services across AWS accounts, consolidate legacy providers, and ensure secure access for users, applications, and service accounts.

You will plan, validate, and cutover migrations of AD domains, Windows and Linux workloads, and WorkSpaces, coordinating with cloud operations, security, and stakeholder teams to deliver

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, Engineering, Cybersecurity, or related field; equivalent experience may be considered.
• 12+ years IT experience, including 5+ years cloud engineering and 3+ years IAM in enterprise-scale environments.
• Professional cloud certification in AWS, Azure, OCI, or GCP.
• Expert-level experience with AWS IAM, account access controls, identity federation, security groups, and cloud-native identity services.
• Deep knowledge of Microsoft Active Directory, LDAP, domain consolidation and migration, GPO administration, and identity integration across cloud, server, and workstation environments.
• Experience planning and executing complex identity, domain, user, group, role, and service-account migrations with validation and cutover management.
• 5+ years administering Windows and Linux systems in engineering/support roles.
• U.S. citizenship is required.

Responsibilities

• Lead the technical execution of an enterprise AWS identity standardization initiative, including migration of AWS account access to a unified identity provider.
• Consolidate multiple legacy identity providers into a single enterprise platform with secure authentication and access continuity.
• Plan and manage AD and domain migration for Windows and Linux EC2 instances, including mapping and validation.
• Map, migrate, and validate users, groups, roles, permissions, and service accounts across ~20 cloud accounts with least-privilege access.
• Oversee AWS WorkSpaces rebuild/migration with alignment to the target identity provider and operations requirements.
• Configure, deploy, and maintain GPOs for Windows WorkSpaces and EC2s with infrastructure teams.
• Develop migration runbooks, cutover plans, rollback procedures, validation criteria, and post-cutover support.
• Provide technical leadership and cross-functional coordination during migration planning, testing, and transition to operations.

Skills

AWS IAM

Active Directory

LDAP

Identity federation

Least-privilege

Leadership

Education

Bachelor’s degree in Computer Science or related field

Tools

AWS

Windows

Linux

GPO

WorkSpaces

Domain migration tools

Job description

ASM Research, an Accenture Federal Services company, seeks an AWS Identity Engineer to lead an enterprise IAM migration across a large cloud environment. Standardize identity services across AWS accounts, consolidate legacy providers, and ensure secure access for users, applications, and service accounts.

You will plan, validate, and cutover migrations of AD domains, Windows and Linux workloads, and WorkSpaces, coordinating with cloud operations, security, and stakeholder teams to deliver