IAM Engineer – Cloud Platform

GuideWell Source

. Design and operate federation and the entitlement model across accounts .

Posted 10/2/2026full-timeUnited StatesMid-LevelSenior💰 $109,300 - $177,600 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Identity and Access Management (IAM) with a focus on cloud identity solutions, including automation of access lifecycle processes and integration with enterprise identity governance platforms. Proficient in designing secure access models and implementing federated identity solutions across cloud environments.

Highest-signal resume keywords

AWS IAMAzure IAMSingle Sign-On (SSO)TerraformCertified Information Systems Security Professional (CISSP)

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cloud Identity ManagementAccess Lifecycle AutomationFederationAccess RecertificationWorkload Identity PatternsSAMLOIDCSCIMCross-Account AccessPermission Boundaries

Tools & Technologies

OktaEntra IDPingEnterprise Identity Governance Platform

Certifications & Qualifications

Certified Information Systems Security Professional (CISSP)

Industry Keywords

HIPAAHITRUSTSOC 2FedRAMPNIST 800-53

Tech Stack

Tools & technologies

AWSAzureCloudTerraform

About the role

Key responsibilities & impact

Design and operate federation and the entitlement model across accounts
Automate access lifecycle processes for joiners, movers, and leavers
Build workload identity patterns and eliminate long-lived keys and standing access
Build access recertification for cloud entitlements and produce audit evidence
Onboard applications to SSO
Review access designs with application teams
Integrate cloud entitlements with the enterprise identity governance platform
Design workload and machine identity patterns, including service roles and OIDC for pipelines

Requirements

What you’ll need

6+ years related work experience in IAM, security, or platform engineering, with 3+ years focused on cloud identity
Related Bachelor's degree required
Strong AWS/Azure IAM skills, including cross-account access, federation, and permission boundaries
Hands-on experience with SSO and federation platforms
Experience integrating an enterprise identity provider such as Okta, Entra ID, or Ping with cloud
Hands-on Terraform
Working knowledge of SAML, OIDC, and SCIM
Experience in an environment governed by HIPAA, HITRUST, SOC 2, FedRAMP, or NIST 800-53
Required to obtain Certified Information Systems Security Professional License (CISSP) within 180 days of hire

Benefits

Comp & perks

Medical, dental, vision, life and global travel health insurance
Income protection benefits: life insurance, short- and long-term disability programs
Leave programs to support personal circumstances
Retirement Savings Plan including employer match
Paid time off
Volunteer time off
10 holidays and 2 well-being days
Additional voluntary benefits
Comprehensive wellness program
Opportunities for incentive or commission compensation
Annual reviews with pay for performance considerations for base pay increases