AWS IAM Engineer

About the role

We are looking for an experienced AWS IAM Engineer to implement, manage, and scale enterprise Identity and Access Management (IAM) solutions across AWS environments. This role focuses on hands-on engineering, automation, and standardization of IAM workloads, with a strong emphasis on IAM persona buildout for services, infrastructure-as-code modernization, and integration with Identity Directory / Identity Governance (IDC) platforms.

Responsibilities

• Build, configure, and manage IAM roles, policies, permission boundaries, and trust relationships for human and service identities
• Troubleshoot and resolve IAM-related access and permission issues
• Design and implement IAM personas for services, applications, and platform workloads
• Support enterprise-scale rollout of standardized IAM personas across development, staging, and production environments
• Ensure IAM persona consistency, reusability, and compliance across teams and accounts
• Partner with security, platform, and application teams to onboard services to approved IAM models
• Convert and modernize CloudFormation-based IAM roles and policies to Terraform
• Engineer Terraform modules for reusable IAM components (roles, policies, instance profiles, service roles)
• Maintain and enhance Terraform pipelines for IAM deployments
• Support migration activities from legacy IAM implementations (e.g., CNF or bespoke frameworks) to Terraform
• Integrate AWS IAM with IDC solutions for identity lifecycle management
• Engineer IAM workflows supporting identity provisioning, deprovisioning, and access reviews
• Assist with audit readiness, compliance reporting, and governance controls

Requirements

Experience with AWS IAM, AWS CloudFormation, and Terraform is essential. Knowledge of RBAC and ABAC principles, experience with Identity Directory / Identity Governance (IDC) platforms, and familiarity with CI/CD pipelines are preferred. Strong problem-solving skills, excellent communication and collaboration abilities, and a proactive approach to learning new technologies are also important.

Qualifications

Minimum of 5 years of experience in IAM engineering and operations, preferably in a technical leadership role. Bachelor's degree in Computer Science, Information Technology, or a related field is required. AWS Certified Solutions Architect or similar certification is beneficial.

Skills

Proficiency in scripting languages such as Python, Bash, or PowerShell. Experience with CI/CD tools and practices. Familiarity with DevOps methodologies and tools. Excellent analytical and problem-solving skills. Strong interpersonal and communication skills. Ability to work independently and as part of a team.

Benefits

The base compensation range for this role in the posted location is: $70,176 - $144,100. Capgemini provides a comprehensive, non-negotiable benefits package to all regular, full-time employees, including medical, dental, and vision coverage, retirement savings plans, life and disability insurance, and employee assistance programs. Additional compensation such as variable incentives, bonuses, or commissions may be offered based on individual performance and company policy.

Pay

The base compensation range listed for this position reflects the minimum and maximum target compensation Capgemini believes it may pay for the role at the time of this posting. This range may be subject to change as permitted by law.

Schedule

This is a remote role based in the USA.