IAM Engineer & AWS Cloud
Gnana prakashUnited StatesMIDPosted 7d ago
AWSIAMAmazon CognitoAWS CDKTerraformCloudFormationDatabricksInfrastructure-as-codeCloud networkingSecrets managementEncryptionMonitoringLogging
About the Role
The AWS Cloud & Identity Engineer will design and implement the cloud and identity foundation for the PSO platform. This role is responsible for owning AWS environment architecture and configuration, IAM policy design, Amazon Cognito integration, and infrastructure as code.
Key Responsibilities
• Design, implement, and support AWS infrastructure across development, test, and production environments
• Configure and manage IAM roles, policies, service accounts, identity federation, and least-privilege access controls
• Implement and support Amazon Cognito authentication and application integration patterns
• Develop and maintain infrastructure-as-code solutions using AWS CDK, Terraform, or CloudFormation
• Establish monitoring, logging, alerting, backup, recovery, and operational support practices
• Contribute to logical and physical architecture diagrams, implementation plans, technical testing, and production readiness
• Support troubleshooting, knowledge transfer, operating procedures, and support runbooks
• Design and support Databricks on AWS, including workspace architecture, VPC connectivity, S3 access, IAM roles, secrets, logging, monitoring, and infrastructure-as-code deployment patterns
Requirements
• Five or more years of hands-on AWS cloud engineering experience
• Strong experience with AWS IAM, Amazon Cognito, authentication, authorization, and identity federation
• Experience with AWS CDK, Terraform, CloudFormation, or comparable infrastructure-as-code tools
• Experience supporting enterprise cloud environments and production operations
• Knowledge of cloud networking, secrets management, encryption, monitoring, and logging
• Strong communication, documentation, troubleshooting, and stakeholder collaboration skills
• Hands-on Databricks experience on AWS, including workspace configuration, IAM and identity integration, S3 or data lake connectivity, cluster or compute policies, secrets management, networking, monitoring, and CI/CD or infrastructure-as-code automation