Lead AWS IAM Security Engineer

Salary: $65,000 - 102,000 per year Requirements: Strong hands-on experience with AWS CDK and TypeScript for security-as-code automation Deep expertise in AWS Private CA with HSM-backed architecture, ACM, mTLS trust stores, and automated certificate issuance, rotation, and revocation workflows Proficiency with Amazon GuardDuty, Security Hub, AWS FSBP, CIS, NIST benchmarks, Macie, and IAM Access Analyzer Experience supporting strict PCI-scoped fintech audits and CSPM frameworks Advanced IAM knowledge covering roles, trust policies, permission boundaries, SCPs, IRSA, and EKS Pod Identity Experience with Secrets Manager, External Secrets Operator, and KMS/MRK envelope encryption Familiarity with SAST tooling such as SonarQube and CodeQL, Dependabot, and software supply chain security practices including image signing and provenance with Cosign and SLSA Experience with Wiz as a CSPM/CNAPP platform Advanced deployments of AWS Private CA and complex KMS key hierarchies Responsibilities: Design and enforce secure AWS IAM policies, roles, permission boundaries, SCPs, and EKS Pod Identity or IRSA configurations Implement and operate security monitoring and posture management tools such as Amazon GuardDuty, AWS Security Hub, AWS CloudTrail, Macie, and IAM Access Analyzer Build and manage automated certificate lifecycle workflows using AWS Private CA, ACM, and mTLS trust stores while coordinating closely with our security approval process Protect sensitive data using AWS KMS, including Multi-Region Keys, Secrets Manager, and the External Secrets Operator Technologies: AWS Cloud HSM IAM Security TypeScript Architect More: We are seeking a specialized Cloud Security Engineer to secure our next-generation multi-region architecture. In this role, we focus on architecting, implementing, and automating strong security controls across AWS, including enterprise IAM, PKI, secrets management, and cloud security posture management, while maintaining strict compliance for PCI-scoped fintech workloads. last updated 37 week of 2026