Project Role : Security Architect

Project Role Description : Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations.

Must have skills : Amazon Web Services (AWS) Security

Positive to have skills : NA

Minimum 5 Year(s) Of Experience Is Required

Educational Qualification : 15 years full time education

Summary

We are looking for an AWS IAM Engineer with 6 years of experience to provide L2/L3 operational support across IAM, SSO, MFA, RBAC, and PAM services. The role requires strong troubleshooting skills, a sound understanding of AWS identity services, and the ability to manage access policies, handle incidents, and deliver clear operational reporting.

Roles &

- Responsibilities:

- Provide L2 and L3 support for AWS IAM, IAM Identity Center (SSO), MFA, RBAC, and PAM resolving escalated incidents within agreed SLAs.
- Maintain and configure AWS Directory Services (Managed Microsoft AD / AD Connector) in line with client requirements.
- Create and manage conditional IAM policies, SCPs, and Permission Boundaries based on least-privilege and zero-trust principles.
- Support incident management processes — log, triage, coordinate resolution, and communicate status updates to stakeholders.
- Lead Root Cause Analysis (RCA) for major IAM incidents document findings and track corrective actions to closure.




- Manage policies for PAM (credential vaulting, JIT access), SSO (SAML/OIDC federation), MFA enforcement, and RBAC entitlements.
- Conduct regular access reviews and entitlement certification in line with compliance requirements.
- Produce operational reports covering incident trends, SLA performance, policy changes, and IAM posture for management and audit audiences.

Professional &
- Technical Skills:

- 6 years of hands-on AWS IAM experience: roles, policies, SCPs, Permission Boundaries, ABAC, and IAM Access Analyser.
- AWS IAM Identity Center (SSO) IdP federation (Azure AD / Okta), SCIM provisioning, and application assignments.
- AWS Directory Services —
- Managed Microsoft AD and AD Connector administration.
- MFA management: enrolment, enforcement policies, and exception handling.
- PAM experience: AWS Systems Manager Session Manager and/or third-party tools (CyberArk, BeyondTrust, Delinea).
- ITIL-aligned incident and problem management proficient with ITSM tools (ServiceNow or equivalent).
- Scripting for automation and reporting: Python, AWS CLI, or PowerShell.
- Preferred Certifications
- AWS Certified Security –
- Specialty
- AWS Certified SysOps Administrator (Associate)
- ITIL Foundation v4

Additional Information
- The candidate should have minimum 6 years of experience in AWS Administration.
- This position is based at our Bengaluru office.
- A 15 years full time education is required.

📌 Security Architect (Bengaluru)
🏢 Accenture in India
📍 Bengaluru