Cloud Identity and Security Engineer

Dark Wolf Solutions•Ogden, UT

5d•$90,000 - $150,000

About The Position

Dark Wolf is seeking a mid-level Cloud Identity & Security Engineer to manage and automate access governance across hybrid identity engines and AWS cloud environments. The role administers end-to-end Authentication, Authorization, and Accounting (AAA) controls using Infrastructure as Code (Terraform), and configures and maintains group memberships, repository permissions, secrets management, and enterprise Single Sign-On (SSO) integrations across PingFederate, Keycloak, GitLab, AWS Landing Zone Accelerator (LZA), and AWS IAM Identity Center (IDC). The position is for a direct, full-time W2 employee. The estimated salary range is $90,000 to $150,000, commensurate with experience and technical skillset. Hires must verify their identity, confirm U.S. citizenship, and complete employment eligibility verification.

Requirements

At least 2 years of hands-on experience in cloud identity management, IAM, or cloud infrastructure operations.
Practical knowledge of federated identity concepts, including SAML and OIDC, and experience with PingFederate, Keycloak, and AWS IAM Identity Center.
Strong proficiency with Terraform for provisioning cloud resources, IAM policies, and identity group memberships.
Hands-on experience managing GitLab group and project permissions and working with AWS CodeCommit, AWS Secrets Manager, and AWS Landing Zone Accelerator.
Solid understanding of AAA principles, RBAC/ABAC models, and identity lifecycle management.
Must verify identity, confirm U.S. citizenship, and complete required employment eligibility verification upon hire.
Must be a direct, full-time W2 employee; third-party staffing agency, C2C, and 1099 independent contractor arrangements are not accepted.

Nice To Haves

AWS Certified Security – Specialty certification.
AWS Certified Solutions Architect – Associate certification.
Ping Identity or Keycloak certification.

Responsibilities

Administer identity federation and user authentication workflows across PingFederate and Keycloak.
Integrate multi-factor authentication (MFA) and SSO protocols, including SAML 2.0 and OIDC, between enterprise identity providers and cloud services.
Provision and maintain user accounts, group assignments, and directory memberships across identity platforms.
Manage fine-grained permission models, roles, and group memberships in AWS IAM Identity Center and GitLab repositories and groups.
Implement and maintain landing zone configuration changes through AWS Landing Zone Accelerator to enforce organizational boundary policies and Service Control Policies.
Enforce least-privilege access across AWS CodeCommit, development repositories, and cloud workloads.
Configure and maintain key-value secrets, database credentials, and API keys in AWS Secrets Manager, including automated rotation and secure access policies.
Audit identity lifecycle workflows, repository permissions, and access logs to ensure compliance with security baselines.
Codify identity resources, group definitions, access policies, and cloud infrastructure using Terraform.
Automate user onboarding and offboarding pipelines and permission requests across GitLab, AWS, PingFederate, and Keycloak.