Senior Architectural Engineer

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Architectural Engineer based in the United States. The Senior Architectural Engineer will lead the design, implementation, and governance of cloud identity and access management (IAM) solutions, primarily across AWS with additional support for Azure environments. This role is essential to protecting sensitive healthcare data by ensuring secure, compliant, and efficient access to cloud resources. The successful candidate will develop identity architectures, enforce least-privilege access, and automate identity lifecycle processes across complex cloud environments. Working closely with security, networking, and application teams, the engineer will strengthen cloud governance and align access controls with industry standards and regulatory requirements. The position also involves investigating access issues, supporting security incident response, and improving visibility through cloud audit logs and monitoring tools. This fully remote opportunity offers the chance to contribute to technology solutions that support healthcare systems while continuing to develop technical expertise.

Design, implement, and manage AWS identity and access management policies, roles, and permissions to enforce least-privilege access across multi-account cloud environments. Conduct regular audits of IAM configurations and access controls to maintain alignment with relevant security frameworks and regulatory requirements, including NIST CSF, HITRUST, HIPAA, SOC 2, and GDPR. Automate identity provisioning and de-provisioning workflows using infrastructure-as-code and configuration management tools such as Terraform, CloudFormation, and Ansible. Troubleshoot IAM-related issues, including access failures, policy conflicts, authentication errors, and permission misconfigurations. Collaborate with security, networking, and application teams to incorporate identity and access management best practices into cloud architectures and deployments. Support security incident response and forensic investigations by analyzing identity activity, access patterns, and audit logs using AWS CloudTrail and Azure Monitor. Implement and manage AWS Organizations to support account governance and centralized administration. Configure and maintain AWS Control Tower guardrails and account provisioning processes to establish consistent cloud security controls. Support AWS Cognito implementations for identity federation and user authentication. Assist with Azure identity and access management activities, including conditional access policies, identity protection, and integration with Active Directory. Continuously improve cloud IAM governance, security controls, and operational processes to strengthen compliance and reduce access-related risks. Requirements: Bachelor's degree in Computer Science, Management Information Systems (MIS), or a related field, or equivalent professional experience. At least five years of cloud engineering experience, with a strong focus on identity and access management in AWS and/or Azure environments. Hands-on experience with AWS IAM, AWS Organizations, AWS Control Tower, and AWS Cognito. Practical experience with infrastructure-as-code tools, particularly Terraform and CloudFormation. Understanding of authentication and identity federation protocols, including SAML, OpenID Connect (OIDC), and OAuth 2.0. Knowledge of cloud security principles, access governance, least-privilege implementation, and identity lifecycle management. Familiarity with security and compliance frameworks, including NIST CSF, HITRUST, HIPAA, SOC 2, and GDPR. Experience troubleshooting cloud access issues and analyzing identity-related logs to support security investigations. Ability to collaborate effectively with security, networking, and application teams to implement secure cloud solutions. Strong analytical and problem-solving skills, with attention to detail and a commitment to maintaining secure, compliant environments. AWS or Azure security certifications are preferred, such as AWS Certified Security – Specialty or Microsoft Certified: Azure Security Engineer Associate. Willingness to travel occasionally, with expected travel of approximately 0–10%. Availability to use a video camera during all interviews and throughout the initial week of orientation. Application deadline: October 30, 2026. Benefits: Annual base salary: $76,100–$108,700, depending on geographic location, internal equity, job-related knowledge, skills, and experience. Remote work: Fully remote opportunity for candidates based in the United States. Flexible vacation policy: Generous and flexible vacation benefits for eligible full-time salaried employees. Retirement savings: 401(k) plan with employer matching. Healthcare coverage: Comprehensive health benefits. Educational assistance: Support for continued learning and professional development. Technical development: Access to technical and leadership development academies to strengthen skills and capabilities. Career growth: Opportunities to expand technical credentials and certifications while working on complex cloud security challenges. Limited travel: Occasional travel, with an expected range of 0–10%.