Lead AWS IAM Security Engineer
Core
Architecting, implementing, and automating strong security controls across AWS, including enterprise IAM, PKI, secrets management, and cloud security posture management for multi-region fintech workloads.
Role type
Lead AWS IAM Security Engineer
Builds
Secure AWS infrastructure with automated certificate lifecycle workflows, strict IAM policies, and CSPM frameworks.
Domain
Cloud Security / Fintech
Deliverable
production ML models | product features | dashboards & analysis | infrastructure
Required skills
AWS CDK, TypeScript, AWS Private CA, HSM-backed architecture, ACM, mTLS trust stores, Amazon GuardDuty, AWS Security Hub, IAM Access Analyzer, AWS KMS, Secrets Manager, External Secrets Operator, SAST tooling (SonarQube, CodeQL), Cosign, SLSA, Wiz (CSPM/CNAPP)
Preferred skills
PCI-scoped audit support, CSPM frameworks, EKS Pod Identity, IRSA, permission boundaries, SCPs
Technologies
AWS Cloud HSM, TypeScript, AWS Private CA, ACM, mTLS, AWS KMS, Secrets Manager, External Secrets Operator, SonarQube, CodeQL, Dependabot, Cosign, SLSA, Wiz
Responsibilities
Design and enforce secure AWS IAM policies, roles, permission boundaries, SCPs, and EKS Pod Identity or IRSA configurations; Implement and operate security monitoring and posture management tools such as Amazon GuardDuty, AWS Security Hub, AWS CloudTrail, Macie, and IAM Access Analyzer; Build and manage automated certificate lifecycle workflows using AWS Private CA, ACM, and mTLS trust stores; Protect sensitive data using AWS KMS, including Multi-Region Keys, Secrets Manager, and the External Secrets Operator
Seniority
Lead, hands-on IC
