Access Control, Amazon Web Services (AWS), Architectural Services, Auditing, Automation, Benchmarking, Cloud Computing, Document Management, Enterprise Protection, External Audit, Identity Data Management, Incident Response, Internal Audit, Leadership, Maintain Compliance, Microsoft Windows Azure, Onboarding, Protective Services, Regulatory Compliance, Root Cause Analysis, Security Architecture, Security Information and Event Management (SIEM), Single Sign-On (SSO), Software Engineering, Time Management, U.S. National Institute of Standards and Technology (NIST)
Job Title: AWS Cloud Security / IAM Lead
Duration- Fulltime Permanent
Location: Minneapolis, MN (Onsite from Day 1)
Job Description:
AWS Cloud Security / IAM Lead
" 8 12 years of experience in cloud security, IAM, or infrastructure security engineering, preferably within BFSI or regulated enterprises.
" Strong hands-on expertise in AWS security services, including:
" AWS IAM (roles, policies, permission boundaries, SCPs)
" AWS Organizations & multi-account governance
" AWS Identity Center (SSO)
" AWS KMS, Secrets Manager
" AWS CloudTrail, Config, GuardDuty, Security Hub
" Deep understanding of IAM design and governance, including:
" Role-based and attribute-based access control (RBAC/ABAC)
" Least privilege model implementation
" Identity lifecycle management (joiner/mover/leaver)
" Experience integrating AWS IAM with enterprise identity providers such as:
" Azure AD / Entra ID
" Okta or similar IdP platforms
" ________________________________________
" Key Responsibilities
" AWS IAM & Identity Security Leadership
" Own the design and implementation of enterprise-wide AWS IAM strategy across multi-account environments.
" Define and enforce least-privilege access models, including role-based and attribute-based controls.
" Lead integration of AWS IAM with enterprise identity providers (Azure AD/Okta), ensuring secure SSO and federation.
" Establish and maintain IAM governance processes, including access reviews, certification, and audit readiness.
" ________________________________________
" Cloud Security Operations
" Monitor and respond to security alerts across AWS using tools such as GuardDuty, Security Hub, and CloudWatch.
" Investigate and remediate IAM-related security risks, misconfigurations, and access issues.
" Oversee logging and monitoring strategy using CloudTrail, Config, and centralized SIEM integrations.
" Collaborate with SecOps teams to ensure timely incident response and root cause analysis.
" ________________________________________
" Access Management & Compliance
" Manage user access lifecycle (provisioning, deprovisioning, entitlement reviews) across AWS environments.
" Ensure compliance with regulatory and enterprise security standards (NIST, CIS benchmarks, etc.).
" Conduct periodic access audits and enforce remediation of policy violations.
" Support internal and external audits by providing IAM evidence and controls documentation.
" ________________________________________
" Security Architecture & Governance
" Define and implement security guardrails using AWS Organizations, SCPs, and automation frameworks.
" Partner with platform and application teams to embed security-by-design principles.
" Drive adoption of policy-as-code and automated compliance checks in CI/CD pipelines.
" Provide architectural guidance for secure onboarding of new workloads and services on AWS.
Q
Q1 Technologies, Inc
Q1 consists of experienced and recognized experts providing the capability to respond to market demand in order to provide professional services for our clients including Enterprise software implementations, application integration and technical / functional support.
Q1 has steadily grown into a Quality IT services and solutions organization with the average experience of our team being over 10 years. We have continuously met or exceeded client expectations by delivering professional services and project implementations on time and under budget to help clients truly recognize return on investment.