Senior Platform Engineer – AWS & Identity Management
About the assignment
A leading organisation is modernising its cloud infrastructure and identity management strategy. You'll architect secure AWS environments that scale reliably while enforcing least-privilege access across teams and applications.
The challenge: balancing security controls with developer experience, integrating on-premise identity systems with cloud-native IAM, and automating compliance checks into the deployment pipeline.
You'll have measurable impact on infrastructure security posture, reduce time-to-deploy for secure workloads, and become the trusted expert in AWS + IAM strategy.
Your responsibilities
- Design and implement AWS IAM policies, roles, and permission boundaries for multi-account environments
- Architect identity federation solutions between on-premise directories (Active Directory/Entra ID) and AWS
- Build infrastructure-as-code (Terraform, CloudFormation) for repeatable, auditable cloud deployments
- Establish and maintain AWS security baselines using CIS Benchmarks and security best practices
- Automate identity lifecycle management (JML) and access provisioning/deprovisioning
- Monitor and respond to IAM anomalies, privilege escalation attempts, and misconfigured access
- Mentor junior engineers on cloud security architecture and secure-by-default design patterns
- Conduct IAM audits and drive remediation of access control gaps
Tech Stack & Tools
Platforms & Tooling
Frameworks & Standards
Cloud & Infrastructure
Methodologies
Certifications (preferred)
Must-haves
- 6+ years platform/infrastructure engineering experience, 3+ years focused on AWS
- Deep hands-on expertise in AWS IAM, identity federation, and multi-account architectures
- Strong infrastructure-as-code skills (Terraform or CloudFormation)
- Experience integrating on-premise identity systems with cloud (Entra ID, AD)
- Solid understanding of RBAC, ABAC, and least-privilege access principles
- Proven ability to communicate security architecture to technical and non-technical stakeholders
Nice-to-haves
- Experience with PAM/IGA platforms (CyberArk, SailPoint, Okta)
- Hands-on work with AWS GuardDuty, Security Hub, or Config
- Knowledge of TIBER-EU or other IAM security frameworks
- Contributions to open-source infrastructure or security tooling
What we offer
- Shape the cloud security strategy of a major organisation
- Work with cutting-edge AWS services and identity platforms
- Mentor and grow a team of cloud engineers
- Flexible working arrangements and development budget
- Competitive salary and comprehensive benefits package
- Personal guidance from a dedicated MVPeople consultant who knows your niche
The process
Introduction
Phone call with your MVPeople consultant (within 24 hours)
Match & Brief
We discuss the assignment in detail and prepare you
Client meeting
Introduction to the client
Start
Contracting and onboarding
Details
Type
Secondment (MVProfessionals)
Location
Provincie Utrecht
Work model
Hybrid
Level
Senior
Industry
digitale-infrastructuur
Market indication
€85,000 - €115,000 per year
Posted
6 November 2026
Job ID
59943
Contact
MVPeople Group
cv@mvpeoplegroup.com