Senior AWS Identity & Security Engineer SRE / Cloud Security
Automate your job search with Sonara.
Submit 10x as many applications with less effort than one manual application.1
Reclaim your time by letting our AI handle the grunt work of job searching.
We continuously scan millions of openings to find your top matches.
Overview
Remote
On-site
Compensation
$17-$79/hour
Job Description
Our client, a IT Services and Consulting company, is looking for a Senior AWS Identity & Security Engineer – SRE / Cloud Security for their New York, NY/New Jersey, NJ/Dallas, TX/Remote location.Responsibilities:
- Identity & Entitlements: Integrate the API layer with AWS IAM Identity Center (IdC) and build a policy engine to enforce data boundaries (SRE vs. App Team vs. Business Unit). This includes integrating Omni into the client’s existing identityfederation model — an established custom credentialvending / SAML broker on the primary landing zone plus existing IdC adoption for console access.
- CrossAccount Data Routing: Implement and automate links to aggregate logs, metrics, and traces across multiple AWS Organizations.
- EndtoEnd Feature Delivery: Build, test, and deploy features from the AWS infrastructure layer (CloudWatch / Omni / IAM) up through the API layer that serves the UI, using CloudWatch crossaccount capabilities. May include writing highperformance APIs (in Go, Python, or Java) to query CloudWatch, CloudTrail, and flow logs, and implementing efficient caching strategies.
- Infrastructure as Code (IaC): Automate the deployment of all resources using Terraform or AWS CDK, leveraging AWS CloudFormation StackSets to deploy source links to 15,000 accounts.
- Enablement: Produce clear architecture and integration documentation and enable the client’s teams to operate and extend the Omni identity and routing model, working as an embedded SME alongside the client’s SRE and observability leadership.
- Top skills required for this role:
- Advanced. Identity & Security (Primary) AWS IAM Identity Center (IdC), SAML/OIDC federation, and integration with an existing enterprise federation / credentialvending model
- Advanced. Attributebased access control (ABAC) and finegrained authorization engines such as AWS Verified Permissions or Open Policy Agent (OPA).
- Advanced. AWS Organizations, CloudFormation StackSets, and Orglevel APIs and policies. Able to automate resource provisioning at a scale of 15,000 accounts.
- Proficient. Python, Java, or Go. Building highperformance REST/API services to query CloudWatch, CloudTrail, and flow logs, with efficient caching strategies and asynchronous data fetching.
- Advanced. CloudWatch (Metrics, Logs, Alarms, Contributor Insights), CloudWatch crossaccount observability / OAM (sink and source configuration), CloudTrail, and flow logs.
- Advanced. Terraform or AWS CDK, with CI/CD pipelines (e.g. GitLab CI) for automated infrastructure deployment.
- Years of Experience:
- 12.00 Years of Experience
- Health Benefits
- Referral Program
- Excellent growth and advancement opportunities
Automate your job search with Sonara.
Submit 10x as many applications with less effort than one manual application.
FAQs About Senior AWS Identity & Security Engineer SRE / Cloud Security Jobs at ICONMA, LLC
What is the work location for this position at ICONMA, LLC?
This job at ICONMA, LLC is located in New York, NY, according to the details provided by the employer. Some roles may also include multiple work locations depending on the requirement.
What pay range can candidates expect for this role at ICONMA, LLC?
Candidates can expect a pay range of $16.5–$78.57 per hour for this role.
What employment applies to this position at ICONMA, LLC?
The employer has not provided this information. This may be discussed during the hiring process.
What is the process to apply for this position at ICONMA, LLC?
You can apply for this role at ICONMA, LLC either through Sonara's automated application system, which helps you submit applications 10X faster with minimal effort, or by applying manually using the direct link on the job page.