Cloud Identity and Security Engineer
Darkwolfsolutions · Ogden, UT
About this role
## Cloud Identity & Security Engineer (Mid-Level) Dark Wolf is seeking a mid-level **Cloud Identity & Security Engineer** to manage and automate access governance across hybrid identity engines and **AWS** environments. ### Key Responsibilities - **Authentication & Identity Engine Management (BYOI)** - Administer identity federation and user authentication workflows across **PingFederate** and **Keycloak** - Integrate **MFA** and **SSO** using **SAML 2.0** and **OIDC** between enterprise identity providers and cloud services - Provision and maintain user accounts, group assignments, and directory memberships across identity platforms - **Authorization & Access Control (AWS & GitLab)** - Manage fine-grained permission models, roles, and group memberships within **AWS IAM Identity Center (IDC)** and **GitLab** repositories/groups - Implement and maintain landing zone configuration changes via **AWS Landing Zone Accelerator (LZA)** to enforce organizational boundary policies and **Service Control Policies (SCPs)** - Enforce **least privilege** access models across **AWS CodeCommit**, development repositories, and cloud workloads - **Secrets Management & Accounting** - Configure and maintain secrets (e.g., key-value secrets, database credentials, API keys) in **AWS Secrets Manager**, including automated rotation and secure access policies - Audit identity lifecycle workflows, repository permissions, and access logs to ensure compliance with security baselines - **Infrastructure as Code (IaC) & Automation** - Codify identity resources, group definitions, access policies, and cloud infrastructure using **Terraform** - Automate user onboarding/offboarding pipelines and permission requests across **GitLab**, **AWS**, and **PingFederate/Keycloak** ### Qualifications / Requirements - **2+ years** hands-on experience in cloud identity management, IAM, or cloud infrastructure operations - Practical knowledge of federated identity concepts (**SAML**, **OIDC**) and experience with **PingFederate**, **Keycloak**, and **AWS IAM Identity Center (IDC)** - Strong proficiency with **Terraform** for provisioning identity and access resources - Hands-on experience managing permissions in **GitLab** (groups/projects) and working with **AWS CodeCommit**, **AWS Secrets Manager**, and **AWS Landing Zone Accelerator (LZA)** - Solid understanding of **AAA** principles and **RBAC/ABAC** models, including identity lifecycle management - **Certifications** (preferred/required depending on role needs): - **AWS Certified Security – Specialty** and/or **AWS Certified Solutions Architect – Associate**, or **Ping Identity / Keycloak** certifications - Bachelor’s degree in Computer Science, Information Technology, or related field - **US Citizenship and an active Top Secret/SCI security clearance required** ### Additional Details - Estimated salary range: **$90,000.00 – $150,000.00** (commensurate with experience and skillset) - **Direct, full-time W2 employment only** (no third-party staffing agencies, C2C, or 1099) - EEO/AA employer (Minorities/Women/Veterans/Disabled and other protected categories) - Employment requires identity verification, confirmation of US citizenship, and completion of employment eligibility verification upon hire
Listing freshness
CronJobs last confirmed this listing 2h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.