Jobs | Devgigs

Cloud Identity and Security Engineer

Dark Wolf Solutions · 🇺🇸 Ogden, UT · posted 11 days ago

Apply Full posting

Extracted from the posting

Base

Not stated

Remote

On-site

Visa

US Citizenship required, no sponsorship

Stack

AWS, Terraform, PingFederate

The posting, condensed

Mid-level Cloud Identity & Security Engineer managing access governance across hybrid identity engines and AWS using Terraform, PingFederate, Keycloak, and AWS IAM Identity Center. Role covers authentication, authorization, secrets management, and IaC automation for identity lifecycle workflows.

The full posting

Dark Wolf is seeking a mid-level Cloud Identity & Security Engineer to manage and automate our access governance across hybrid identity engines and AWS cloud environments. In this role, you will be responsible for administering end-to-end AAA (Authentication, Authorization, and Accounting) controls using Infrastructure as Code (Terraform). You will configure and maintain group memberships, repository permissions, secrets management, and enterprise Single Sign-On (SSO) integrations spanning PingFederate, Keycloak, GitLab, AWS Landing Zone Accelerator (LZA), and AWS IAM Identity Center (IDC).

Key Responsibilities

Authentication & Identity Engine Management (BYOI):
Authorization & Access Control (AWS & GitLab):
Secrets Management & Accounting:
Infrastructure as Code (IaC) & Automation:

Qualifications & Requirements

2+ years of hands-on experience in cloud identity management, IAM, or cloud infrastructure operations.
Practical knowledge of federated identity concepts (SAML, OIDC), PingFederate, Keycloak, and AWS IAM Identity Center (IDC).
Strong proficiency with Terraform for provisioning cloud resources, IAM policies, and identity group memberships.
Hands-on experience managing permissions in GitLab (groups/projects) and working with AWS CodeCommit, AWS Secrets Manager, and AWS Landing Zone Accelerator (LZA).
Solid understanding of AAA principles, RBAC/ABAC models, and identity lifecycle management.
AWS Certified Security – Specialty, AWS Certified Solutions Architect – Associate, or Ping Identity / Keycloak certifications.
Bachelor’s degree in Computer Science, Information Technology, or a related field.
US Citizenship and an active Top Secret/SCI security clearance required.

The estimated salary range for this position is $90,000.00 - $150,000.00, commensurate on experience and technical skillset.

We are strictly looking for direct, full-time W2 employees. We do not engage with third-party staffing agencies, C2C, or 1099 independent contractors for this role.

We are proud to be an EEO/AA employer Minorities/Women/Veterans/Disabled and other protected categories.

In compliance with federal law, all persons hired will be required to verify identity, confirm US Citizenship, and complete the required employment eligibility verification upon hire.