Cloud Identity & DevOps Operations Engineer - Hybrid

USDC•Charlotte, NC

2h•Hybrid

About The Position

Genesis10 is seeking a highly motivated Cloud Identity & DevOps Operations Engineer to support the stability, security, and operational excellence of enterprise identity platforms across AWS, Azure, and Google Cloud Platform (GCP). This role is responsible for the day-to-day operations, monitoring, and continuous improvement of cloud identity services. The ideal candidate will bring a hands-on operations mindset, with a focus on service reliability, incident management, automation, and audit readiness within a large-scale enterprise environment. You will partner closely with Engineering, Security, and Audit teams to ensure identity services are secure, scalable, and consistently aligned with enterprise governance standards.

Requirements

7 years of experience in Cloud Operations, Identity Operations, or Infrastructure Support
Strong hands-on experience supporting AWS Identity (Identity Center, IAM)
Hands-on experience with Microsoft Entra ID (Azure AD) operations
Working knowledge of GCP IAM, including roles, service accounts, and policy management
Experience supporting identity federation technologies (SAML, OIDC, SCIM; PingFederate preferred)
Experience working in multi-account / multi-project cloud environments (AWS Organizations, Azure tenants, GCP org structure)
Experience supporting Terraform in production (state management, troubleshooting, environment separation)
Experience with CI/CD tools such as Jenkins, Horizon, CircleCI, or Bitbucket
Strong experience in incident management and operational support
Proficiency in PowerShell and/or Python scripting
Solid understanding of identity security, access governance, and authentication protocols (SSO, MFA, OAuth2/OIDC)
Experience with monitoring, logging, and operational dashboards
Strong communication skills and ability to work across technical and non-technical teams
Hybrid schedule requirement of a minimum of 3 days per week

Nice To Haves

Experience with ServiceNow or similar platforms for ticketing and workflow automation
Familiarity with SRE practices (SLAs, SLIs, service reliability engineering)
Knowledge of PKI, certificate management, encryption, or key management
Experience with GCP identity features such as Workload Identity Federation, IAM Conditions, and Access Approval
Industry certifications such as: AWS Security Specialty, Azure Security Engineer (AZ-500), or Google Professional Cloud Security Engineer

Responsibilities

Provide 24x7 operational support for AWS, Azure, and GCP identity platforms, ensuring high availability and performance
Design, build, and maintain scalable Terraform-based Infrastructure as Code (IaC) frameworks to provision and manage cloud infrastructure and identity configurations in production environments
Lead incident management activities, including triage, escalation, root cause analysis, and resolution
Maintain monitoring, alerting, and logging to proactively identify and resolve issues
Support audit and compliance efforts, including evidence collection and control validation
Manage and support AWS Identity Center (SSO), including provisioning, permission sets, and account assignments
Support AWS IAM operations, including roles, policies, and least-privilege access controls
Support multi-account AWS environments and identity governance
Operate and support Microsoft Entra ID (Azure AD), including Application onboarding (Service Principals, App Registrations), Role-based access control (RBAC) and Conditional Access policies
Operate and support GCP IAM, including roles, policies, and least-privilege access controls
Manage GCP service accounts and identity lifecycle (creation, key management, rotation, decommissioning)
Support Workload Identity Federation and cross-cloud identity access patterns
Implement and support IAM Conditions and Access Approval workflows for privileged access
Support identity governance and policy enforcement across GCP organizations and projects
Maintain and troubleshoot identity federation integrations (SAML, OIDC) and automated provisioning (SCIM)
Execute user onboarding/offboarding processes with strong focus on accuracy, timeliness, and audit compliance
Manage and troubleshoot CI/CD pipelines supporting identity deployments
Drive process improvements and automation to reduce manual effort and improve reliability
Collaborate with Engineering to ensure smooth transition of new capabilities into production support
Contribute to runbooks, operational procedures, and SRE alignment (SLAs, SLIs)

Benefits

Access to hundreds of clients, most who have been working with Genesis10 for 5-20 years.
The opportunity to have a career-home in Genesis10; many of our consultants have been working exclusively with Genesis10 for years.
Access to an experienced, caring recruiting team (more than 7 years of experience, on average.)
Behavioral Health Platform
Medical, Dental, Vision
Health Savings Account
Voluntary Hospital Indemnity (Critical Illness & Accident)
Voluntary Term Life Insurance
401K
Sick Pay (for applicable states/municipalities)
Commuter Benefits (Dallas, NYC, SF, and Illinois)