Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 2 days ago

Hiring: Principal IAM Architect | AWS Security & Authorization | 15+ Years | local to CA only

TMS LLC7 open roles

Where
Los Angeles, CA, United States
Work mode
On site
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowHiring: Principal IAM Architect | AWS Security & Authorization | 15+ Years | local to CA onlyTMS LLC · Los Angeles, CA, United States

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on TMS LLC's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.9% of postings close within 7 days. Measured by our own scanner across the market. TMS LLC postings stay open a median of 10 days.

Share of postings closed within
  1. 2.2%1 day
  2. 4.7%3 days
  3. 12.9%7 days
  4. 21.0%14 days
  5. 35.6%30 days
  6. 58.5%60 days
This job: posted 2 days ago

TMS LLC median: 10 days open

The posting

Job Description

Hiring: Principal IAM Architect | AWS Security & Authorization

📍 Location: Remote – Los Angeles, CA (10% travel required for client workshops and meetings)

📅 Duration: 3+ Months (Extension Possible)

💼 Experience: 15+ Years

We are looking for an experienced Principal IAM Architect to lead identity and access management architecture, AWS security, authorization policies, and enterprise access controls. The ideal candidate will have strong hands-on experience designing secure IAM frameworks, implementing least-privilege access, and developing fine-grained authorization policies.

Key Responsibilities

  • Design and implement enterprise IAM architecture across AWS and cloud environments.
  • Develop and manage AWS IAM roles, permission policies, trust policies, and reusable IAM policy templates.
  • Implement fine-grained authorization using Cedar Policy Language and policy-based access controls.
  • Define and enforce least-privilege access, role-based access control (RBAC), and attribute-based access control (ABAC).
  • Integrate identity and authorization solutions using OAuth 2.0, OIDC, JWT, and identity federation.
  • Automate IAM provisioning and policy deployment using Terraform, AWS CDK, or CloudFormation.
  • Establish security controls for APIs, service identities, workloads, and AI-enabled applications.
  • Collaborate with cloud security, application development, DevSecOps, and enterprise architecture teams.
  • Implement security validation, policy testing, audit logging, and continuous compliance controls.

Required Skills

  • 15+ years of experience in IT, cloud security, IAM architecture, or enterprise security.
  • Strong hands-on experience with AWS IAM, roles, policies, permissions, and least-privilege access.
  • Experience developing IAM policy templates and reusable authorization frameworks.
  • Knowledge or hands-on experience with Cedar Policy Language and fine-grained authorization.
  • Strong understanding of RBAC, ABAC, identity federation, OAuth 2.0, OIDC, and JWT.
  • Experience with Terraform, AWS CDK, or CloudFormation.
  • Knowledge of secure API integrations, identity governance, and cloud security best practices.
  • Experience with CI/CD security automation and policy validation.

Preferred Qualifications

  • Experience securing AI applications, AI agents, and tool-based integrations.
  • Familiarity with AWS Bedrock and AgentCore identity or gateway capabilities.
  • Experience with Python, GitHub Actions, and security automation.
  • Knowledge of policy-as-code and authorization testing frameworks.

Additional Information

All your information will be kept confidential according to EEO guidelines.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against TMS LLC's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on TMS LLC's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    TMS LLC's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.