SRE – Security / Identity Engineer / Observability
SRE – Security / Identity Engineer / Observability Location: US – Remote Employment Type: Full-Time Duration: 12+ Months
Job Description
We are seeking an experienced SRE – Security / Identity Engineer / Observability with strong expertise in AWS Identity & Security, cloud observability, multi-account governance, backend development, and Infrastructure as Code. The ideal candidate will have experience designing and automating highly scalable AWS environments across large enterprise multi-account ecosystems.
Key Responsibilities
Design, implement, and manage enterprise-scale AWS identity and access management solutions. Configure and integrate AWS IAM Identity Center (IdC) with enterprise identity providers using SAML and OIDC federation. Integrate AWS environments with existing enterprise federation and credential-vending models. Implement Attribute-Based Access Control (ABAC) and fine-grained authorization using AWS Verified Permissions, Open Policy Agent (OPA), or similar policy engines. Design and maintain enterprise cloud observability solutions using Amazon CloudWatch Metrics, Logs, Alarms, and Contributor Insights. Implement CloudWatch cross-account observability/OAM, including source and sink configurations. Build monitoring, auditing, and security visibility solutions using AWS CloudTrail and VPC Flow Logs. Manage large-scale AWS environments using AWS Organizations, CloudFormation StackSets, organizational policies, and APIs. Automate resource provisioning and governance across environments consisting of 15,000+ AWS accounts. Develop high-performance backend services and REST APIs using Python, Java, or Go. Build APIs and services capable of querying and processing CloudWatch, CloudTrail, and flow-log data. Implement efficient caching, asynchronous processing, and data-fetching strategies for scalable backend services. Develop and maintain Infrastructure as Code using Terraform or AWS CDK. Build and maintain automated CI/CD pipelines, including GitLab CI, for infrastructure provisioning and application deployments. Collaborate with Security, SRE, Platform Engineering, and Cloud Infrastructure teams to improve reliability, security, automation, and operational visibility. Required Skills Advanced AWS Identity & Security / IAM AWS IAM Identity Center (IdC) SAML / OIDC Federation Attribute-Based Access Control (ABAC) AWS Verified Permissions / Open Policy Agent (OPA) Amazon CloudWatch – Metrics, Logs, Alarms & Contributor Insights CloudWatch Cross-Account Observability / OAM AWS CloudTrail & VPC Flow Logs AWS Organizations AWS CloudFormation StackSets Large-scale AWS multi-account governance Python, Java, or Go REST API / Backend Service Development Asynchronous processing & caching Terraform or AWS CDK GitLab CI / CI/CD Infrastructure automation