AWS Identity Security Engineer(Contract)

At KeyData Cyber, we’re shaping the future of identity security. Recognized by Gartner and KuppingerCole as a leading IAM professional services firm, we specialize exclusively in designing, deploying, and managing end-to-end Identity and Access Management programs for organizations across North America.

With 20 years of experience, 50M+ identities managed, and 1,000+ successful deployments, our team is our strongest asset and is built by design to help clients protect critical infrastructure, enable digital transformation, and ensure compliance with confidence.

We deliver comprehensive solutions across IAM domains, including:

• Workforce IAM (Access Management, Identity Governance and Administration, Privileged Access Management)
• Consumer IAM (Identity Verification, Authentication and Access, Threat Detection) in highly regulated industries.

If you’re ready to grow your career alongside some of the industry’s best, come join us — you’re key to our success

As an AWS Security Engineer, you will be part of our Delivery Services Team. This position will be responsible for implementing and maintaining secure access controls, hardening cloud infrastructure, and automating security operations across AWS environments. As a key contributor to our clients’ cloud security initiatives, you will play an integral role in protecting critical systems, ensuring compliance, and enabling secure access to cloud resources.

Location: USA

Employment Type: 3 months contract, Remote

What You’ll Do:

• Configure and maintain AWS IAM roles, policies, permission boundaries, and resource-based policies.
• Implement least-privilege access controls for engineers, administrators, applications, and automated workloads.
• Manage federated access and permission sets through AWS IAM Identity Center and enterprise identity providers.
• Configure secure cross-account access and troubleshoot access-related issues across AWS environments.
• Review and remediate excessive permissions, inactive credentials, and inappropriate privileged access.
• Support AWS Organizations and Service Control Policies (SCPs), ensuring proper governance and understanding of their impact on effective permissions.
• Harden Amazon EC2 instances running Linux and/or Windows Server using approved security baselines and industry standards such as CIS Benchmarks.
• Configure operating system permissions, host firewalls, audit logging, endpoint security controls, and secure administrative access mechanisms.
• Implement patching, vulnerability remediation, and configuration compliance processes using AWS Systems Manager and supporting tools.
• Build, maintain, and manage hardened Amazon Machine Images (AMIs).
• Reduce unnecessary services, exposed ports, and direct administrative access to improve security posture.
• Investigate configuration drift and validate that security improvements do not impact application availability or business operations.
• Develop Python, Bash, and/or PowerShell scripts to automate access provisioning, security checks, hardening activities, and remediation processes.
• Utilize Terraform and/or AWS CloudFormation to deploy secure, repeatable, and scalable infrastructure configurations.
• Automate patching, configuration enforcement, compliance validation, and operational tasks through AWS Systems Manager.
• Integrate security controls, policy validation, and compliance checks into CI/CD pipelines.
• Implement logging, monitoring, and alerting capabilities to identify unauthorized changes, access violations, and configuration issues.
• Maintain version-controlled infrastructure code, technical documentation, operational procedures, and security runbooks.
• Collaborate with cloud infrastructure, identity, security, and application teams to design and implement practical security controls.
• Troubleshoot IAM policy evaluations, instance profiles, workload credentials, operating system access issues, and cloud security incidents.
• Support security assessments, audits, and compliance initiatives by providing evidence of access controls, system hardening, and remediation activities.
• Execute infrastructure and security changes following appropriate testing, rollback planning, and production change management procedures.

Who We’re Looking For:

• 3–5 years of hands-on experience administering, securing, and supporting AWS cloud environments.
• Bachelor’s or Master’s degree in Computer Science, Computer Engineering,…