AWS IAM Engineer

Minor Hotels Europe and Americas

AWS IAM Engineer implementing and scaling IAM solutions across AWS environments. Focus on automation, standardization, and IAM persona buildout for enterprise applications and services.

Posted 5/5/2026full-timeRemote • Texas • 🇺🇸 United StatesMid-LevelSenior💰 $70,176 - $144,100 per yearWebsite

Tech Stack

Tools & technologies

AWSTerraform

About the role

Key responsibilities & impact

Engineer and maintain AWS IAM workloads across multi-account environments
Build, configure and manage IAM roles, policies, and permission boundaries
Design and implement IAM personas for services and applications
Convert and modernize CloudFormation-based IAM roles and policies to Terraform
Engineer IAM workflows supporting identity provisioning, deprovisioning, and access reviews
Integrate AWS IAM with IDC solutions for identity lifecycle management

Requirements

What you’ll need

Experience in IAM engineering, AWS IAM workloads, and multi-account environments
Strong understanding of IAM roles, policies, permission boundaries, and trust relationships
Implementation of least-privilege access models using RBAC and ABAC principles
Familiarity with Infrastructure as Code, particularly Terraform and CloudFormation
Experience with integration of IAM with Identity Directory/Identity Governance solutions

Benefits

Comp & perks

Paid time off based on employee grade (A-F), defined by policy: Vacation: 12-25 days, depending on grade
Company paid holidays
Personal Days
Sick Leave
Medical, dental, and vision coverage (or provincial healthcare coordination in Canada)
Retirement savings plans (e.g., 401(k) in the U.S., RRSP in Canada)
Life and disability insurance
Employee assistance programs
Other benefits as provided by local policy and eligibility

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

AWS IAMIAM rolesIAM policiespermission boundariesTerraformCloudFormationidentity provisioningdeprovisioningaccess reviewsRBAC