Project Role : Security Architect

Project Role Description : Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations.

Must have skills : Amazon Web Services (AWS) Security

Good to have skills : NA

Minimum 5 year(s) of experience is required

Educational Qualification : 15 years full time education Summary:

We are looking for an AWS IAM Engineer with 6 years of experience to provide L2/L3 operational support across IAM, SSO, MFA, RBAC, and PAM services. The role requires strong troubleshooting skills, a sound understanding of AWS identity services, and the ability to manage access policies, handle incidents, and deliver clear operational reporting. Roles & Responsibilities:

-Provide L2 and L3 support for AWS IAM, IAM Identity Center (SSO), MFA, RBAC, and PAM resolving escalated incidents within agreed SLAs.

-Maintain and configure AWS Directory Services (Managed Microsoft AD / AD Connector) in line with client requirements.

-Create and manage conditional IAM policies, SCPs, and Permission Boundaries based on least-privilege and zero-trust principles.

-Support incident management processes — log, triage, coordinate resolution, and communicate status updates to stakeholders.

-Lead Root Cause Analysis (RCA) for major IAM incidents document findings and track corrective actions to closure.





-Manage policies for PAM (credential vaulting, JIT access), SSO (SAML/OIDC federation), MFA enforcement, and RBAC entitlements.

-Conduct regular access reviews and entitlement certification in line with compliance requirements.

-Produce operational reports covering incident trends, SLA performance, policy changes, and IAM posture for management and audit audiences. Qualified & Technical Skills:

-6 years of hands-on AWS IAM experience: roles, policies, SCPs, Permission Boundaries, ABAC, and IAM Access Analyser.

-AWS IAM Identity Center (SSO) IdP federation (Azure AD / Okta), SCIM provisioning, and application assignments.

-AWS Directory Services — Managed Microsoft AD and AD Connector administration.

-MFA management: enrolment, enforcement policies, and exception handling.

-PAM experience: AWS Systems Manager Session Manager and/or third-party tools (CyberArk, BeyondTrust, Delinea).

-ITIL-aligned incident and problem management proficient with ITSM tools (ServiceNow or equivalent).

-Scripting for automation and reporting: Python, AWS CLI, or PowerShell.

-Preferred Certifications

-AWS Certified Security – Specialty

-AWS Certified SysOps Administrator (Associate)

-ITIL Foundation v4 Additional Information:

- The candidate should have minimum 6 years of experience in AWS Administration.
- This position is based at our Bengaluru office.
- A 15 years full time education is required.

📌 Security Architect (Bengaluru)
🏢 Accenture
📍 Bengaluru