Cloud Identity and Security Engineer

Dark Wolf Solutions•Ogden, UT

About The Position

Dark Wolf is seeking a mid-level Cloud Identity & Security Engineer to manage and automate access governance across hybrid identity engines and AWS cloud environments. The role administers end-to-end authentication, authorization, and accounting (AAA) controls using Terraform as Infrastructure as Code. It includes configuring and maintaining group memberships, repository permissions, secrets management, and enterprise SSO integrations across PingFederate, Keycloak, GitLab, AWS Landing Zone Accelerator (LZA), and AWS IAM Identity Center (IDC). The position manages identity federation and authentication workflows, cloud and repository access controls, secrets, and identity lifecycle automation. It also audits access and permissions for compliance with security baselines. Dark Wolf is hiring direct, full-time W2 employees and does not engage third-party staffing agencies, C2C, or 1099 independent contractors for this role. Applicants hired must verify identity, confirm U.S. citizenship, and complete employment eligibility verification.

Requirements

At least 2 years of hands-on experience in cloud identity management, IAM, or cloud infrastructure operations.
Practical knowledge of federated identity concepts, including SAML and OIDC, and experience with PingFederate, Keycloak, and AWS IAM Identity Center.
Strong proficiency with Terraform for provisioning cloud resources, IAM policies, and identity group memberships.
Hands-on experience managing GitLab group and project permissions and working with AWS CodeCommit, AWS Secrets Manager, and AWS Landing Zone Accelerator.
Solid understanding of AAA principles, RBAC/ABAC models, and identity lifecycle management.

Nice To Haves

AWS Certified Security – Specialty certification.
AWS Certified Solutions Architect – Associate certification.
Ping Identity or Keycloak certifications.

Responsibilities

Administer identity federation and user authentication workflows across PingFederate and Keycloak.
Integrate MFA and SSO protocols, including SAML 2.0 and OIDC, between enterprise identity providers and cloud services.
Provision and maintain user accounts, group assignments, and directory memberships across identity platforms.
Manage fine-grained permission models, roles, and group memberships in AWS IAM Identity Center and GitLab repositories and groups.
Implement and maintain AWS Landing Zone Accelerator configuration changes to enforce organizational boundary policies and Service Control Policies.
Enforce least-privilege access across AWS CodeCommit, development repositories, and cloud workloads.
Configure and maintain key-value secrets, database credentials, and API keys in AWS Secrets Manager, including automated rotation and secure access policies.
Audit identity lifecycle workflows, repository permissions, and access logs for compliance with security baselines.
Codify identity resources, group definitions, access policies, and cloud infrastructure using Terraform.
Automate user onboarding and offboarding pipelines and permission requests across GitLab, AWS, PingFederate, and Keycloak.