Key Skills
- AWS IAM
- IAM roles and policies
- Role-Based Access Control (RBAC)
- Principle of least privilege
- AWS IAM Access Analyzer
- User and privileged-account lifecycle management
- Access provisioning and de-provisioning
- Access reviews and recertification
- CyberArk PAM administration
- Privileged-account onboarding/removal
- Credential management
- Service-account security
- Access-control matrices
- Authentication and authorization controls
- Audit logging and access reporting
- Secrets and credential governance
The environment explicitly includes AWS IAM and CyberArk integration, and the scope includes access reviews, privileged-account governance and PAM operation.
Responsibilities
- Manage IAM users, roles, policies and cloud-resource permissions.
- Implement and maintain least-privilege/RBAC controls.
- Provision, modify and revoke user and administrative access.
- Conduct periodic user and privileged-access reviews.
- Identify and remove obsolete/inactive access.
- Operate and administer CyberArk/PAM services.
- Onboard and remove privileged users, accounts, credentials and systems.
- Review privileged permissions and remove unnecessary privileges.
- Maintain access-control matrices and audit evidence.
- Support credential revocation during security incidents.
- Support access-related incidents and compliance reviews.
Preferred Certifications
- CyberArk certification
- AWS cloud/security certification
- IAM/PAM-related security certification