Project Role : Security Architect
Project Role Description : Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations.
Must have skills : Amazon Web Services (AWS) Security
Good to have skills : NA
Minimum 3 year(s) of experience is required
Educational Qualification : 15 years full time education

Summary:
We are looking for an AWS IAM Engineer with 6 years of experience to provide L2/L3 operational support across IAM, SSO, MFA, RBAC, and PAM services. The role requires strong troubleshooting skills, a sound understanding of AWS identity services, and the ability to manage access policies, handle incidents, and deliver clear operational reporting.

Roles & Responsibilities:

- Provide L2 and L3 support for AWS IAM, IAM Identity Center (SSO), MFA, RBAC, and PAM resolving escalated incidents within agreed SLAs.
- Maintain and configure AWS Directory Services (Managed Microsoft AD / AD Connector) in line with client requirements.
- Create and manage conditional IAM policies, SCPs, and Permission Boundaries based on least-privilege and zero-trust principles.
- Support incident management processes — log, triage, coordinate resolution, and communicate status updates to stakeholders.
- Lead Root Cause Analysis (RCA) for major IAM incidents document findings and track corrective actions to closure.




- Manage policies for PAM (credential vaulting, JIT access), SSO (SAML/OIDC federation), MFA enforcement, and RBAC entitlements.
- Conduct regular access reviews and entitlement certification in line with compliance requirements.
- Produce operational reports covering incident trends, SLA performance, policy changes, and IAM posture for management and audit audiences.

Qualified & Technical Skills:

- 6 years of hands-on AWS IAM experience: roles, policies, SCPs, Permission Boundaries, ABAC, and IAM Access Analyser.
- AWS IAM Identity Center (SSO) IdP federation (Azure AD / Okta), SCIM provisioning, and application assignments.
- AWS Directory Services Managed Microsoft AD and AD Connector administration.
- MFA management: enrolment, enforcement policies, and exception handling.
- PAM experience: AWS Systems Manager Session Manager and/or third-party tools (CyberArk, BeyondTrust, Delinea).
- ITIL-aligned incident and problem management proficient with ITSM tools (ServiceNow or equivalent).
- Scripting for automation and reporting: Python, AWS CLI, or PowerShell.
- Preferred Certifications
- AWS Certified Security Specialty
- AWS Certified SysOps Administrator (Associate)
- ITIL Foundation v4

Additional Information:

- The candidate should have minimum 6 years of experience in AWS Administration.
- This position is based at our Bengaluru office.
- A 15 years full time education is required.

15 years full time education

📌 Security Architect (Bengaluru)
🏢 Accenture
📍 Bengaluru