LocationThis is a remote role based in the USA.
About the Job You're Considering We are looking for an experienced
AWS IAM Engineer to implement, manage, and scale enterprise Identity and Access Management (IAM) solutions across AWS environments. This role focuses on hands-on engineering, automation, and standardization of IAM workloads, with a strong emphasis on
IAM persona buildout for services,
infrastructure-as-code modernization, and
integration with Identity Directory / Identity Governance (IDC) platforms.
Your Role IAM Engineering & Operations- Engineer and maintain AWS IAM workloads across multi-account environments
- Build, configure, and manage IAM roles, policies, permission boundaries, and trust relationships for human and service identities
- Implement least-privilege access models using RBAC and ABAC principles
- Troubleshoot and resolve IAM-related access and permission issues
IAM Persona Buildout & Enterprise Rollout- Design and implement IAM personas for services, applications, and platform workloads
- Support enterprise-scale rollout of standardized IAM personas across development, staging, and production environments
- Ensure IAM persona consistency, reusability, and compliance across teams and accounts
- Partner with security, platform, and application teams to onboard services to approved IAM models
Infrastructure as Code & Migration- Convert and modernize CloudFormation-based IAM roles and policies to Terraform
- Engineer Terraform modules for reusable IAM components (roles, policies, instance profiles, service roles)
- Maintain and enhance Terraform pipelines for IAM deployments
- Support migration activities from legacy IAM implementations (e.g., CNF or bespoke frameworks) to Terraform
Identity Directory / Identity Governance (IDC)- Integrate AWS IAM with IDC solutions for identity lifecycle management
- Engineer IAM workflows supporting identity provisioning, deprovisioning, and access reviews
- Support federation and identity synchronization between AWS and IDC platforms
- Assist with audit readiness, compliance reporting, and governance controls
The base compensation range for this role in the posted location is:
$70,176- $144,100. Capgemini provides compensation range information in accordance with applicable national, state, provincial, and local pay transparency laws. The base compensation range listed for this position reflects the minimum and maximum target compensation Capgemini, in good faith, believes it may pay for the role at the time of this posting. This range may be subject to change as permitted by law.
The actual compensation offered to any candidate may fall outside of the posted range and will be determined based on multiple factors legally permitted in the applicable jurisdiction.
These may include, but are not limited to: Geographic location, Education and qualifications, Certifications and licenses, Relevant experience and skills, Seniority and performance, Market and business consideration, Internal pay equity.
It is not typical for candidates to be hired at or near the top of the posted compensation range.
In addition to base salary, this role may be eligible for additional compensation such as variable incentives, bonuses, or commissions, depending on the position and applicable laws.
Capgemini offers a comprehensive, non-negotiable benefits package to all regular, full-time employees. In the U.S. and Canada, available benefits are determined by local policy and eligibility and may include:
- Paid time off based on employee grade (A-F), defined by policy: Vacation: 12-25 days, depending on grade, Company paid holidays, Personal Days, Sick Leave
- Medical, dental, and vision coverage (or provincial healthcare coordination in Canada)
- Retirement savings plans (e.g., 401(k) in the U.S., RRSP in Canada)
- Life and disability insurance
- Employee assistance programs
- Other benefits as provided by local policy and eligibility
