Senior Architectural Engineer

Jobgether · Remote, United States

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Architectural Engineer based in the United States.

The Senior Architectural Engineer will lead the design, implementation, and governance of cloud identity and access management (IAM) solutions, primarily across AWS with additional support for Azure environments. This role is essential to protecting sensitive healthcare data by ensuring secure, compliant, and efficient access to cloud resources. The successful candidate will develop identity architectures, enforce least-privilege access, and automate identity lifecycle processes across complex cloud environments. Working closely with security, networking, and application teams, the engineer will strengthen cloud governance and align access controls with industry standards and regulatory requirements. The position also involves investigating access issues, supporting security incident response, and improving visibility through cloud audit logs and monitoring tools. This fully remote opportunity offers the chance to contribute to technology solutions that support healthcare systems while continuing to develop technical expertise.
\Design, implement, and manage AWS identity and access management policies, roles, and permissions to enforce least-privilege access across multi-account cloud environments.
Conduct regular audits of IAM configurations and access controls to maintain alignment with relevant security frameworks and regulatory requirements, including NIST CSF, HITRUST, HIPAA, SOC 2, and GDPR.
Automate identity provisioning and de-provisioning workflows using infrastructure-as-code and configuration management tools such as Terraform, CloudFormation, and Ansible.
Troubleshoot IAM-related issues, including access failures, policy conflicts, authentication errors, and permission misconfigurations.
Collaborate with security, networking, and application teams to incorporate identity and access management best practices into cloud architectures and deployments.
Support security incident response and forensic investigations by analyzing identity activity, access patterns, and audit logs using AWS CloudTrail and Azure Monitor.
Implement and manage AWS Organizations to support account governance and centralized administration.
Configure and maintain AWS Control Tower guardrails and account provisioning processes to establish consistent cloud security controls.
Support AWS Cognito implementations for identity federation and user authentication.
Assist with Azure identity and access management activities, including conditional access policies, identity protection, and integration with Active Directory.
Continuously improve cloud IAM governance, security controls, and operational processes to strengthen compliance and reduce access-related risks.
Bachelors degree in Computer Science, Management Information Systems (MIS), or a related field, or equivalent professional experience.
At least five years of cloud engineering experience, with a strong focus on identity and access management in AWS and/or Azure environments.
Hands-on experience with AWS IAM, AWS Organizations, AWS Control Tower, and AWS Cognito.
Knowledge of cloud security principles, access governance, least-privilege implementation, and identity lifecycle management.
Experience troubleshooting cloud access issues and analyzing identity-related logs to support security investigations.
Ability to collaborate effectively with security, networking, and application teams to implement secure cloud solutions.
AWS or Azure security certifications are preferred, such as AWS Certified Security – Specialty or Microsoft Certified: Willingness to travel occasionally, with expected travel of approximately 0–10%.
Availability to use a video camera during all interviews and throughout the initial week of orientation.
Application deadline: 76,100–$108,700, depending on geographic location, internal equity, job-related knowledge, skills, and experience.
Remote work: Fully remote opportunity for candidates based in the United States.
Flexible vacation policy: Generous and flexible vacation benefits for eligible full-time salaried employees.
Retirement savings: Healthcare coverage: Career growth: Opportunities to expand technical credentials and certifications while working on complex cloud security challenges.
Limited travel: Occasional travel, with an expected range of 0–10%.
\We use an

AI-powered matching process

to ensure your application is reviewed quickly, objectively, and fairly against the roles core requirements. Data Privacy Notice:

By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR).