Cloud Identity and Security Engineer

Dark Wolf Solutions
Ogden, UT
On-site

Who this role is best for

Aimed at mid-level professionals in cloud identity and security who can manage hybrid identity engines and automate access governance using Terraform. The role emphasizes collaboration with AWS and GitLab ecosystems and requires full-time W2 employment in Ogden, UT.

Best fit for

  • Candidates with experience in hybrid identity platforms and Terraform automation for AAA controls
    — “manage and automate our access governance across hybrid identity engines and AWS cloud environments”
  • Individuals who have worked with federated identity protocols and enterprise SSO integrations
    — “Integrating multi-factor authentication (MFA) and Single Sign-On (SSO) protocols (SAML 2.0, OIDC) between enterprise identity providers and cloud services”
  • Professionals with a strong background in AWS IAM and Secrets Manager for secure access control
    — “Configuring and maintain key-value secrets, database credentials, and API keys within AWS Secrets Manager”

Things to consider

  • Only direct, full-time W2 employees are eligible, excluding third-party or independent contractors
    — “We are strictly looking for direct, full-time W2 employees”
  • The role requires US citizenship for employment eligibility verification
    — “complete the required employment eligibility verification upon hire”

How to stand out

  • Emphasize experience with PingFederate, Keycloak, and AWS IAM Identity Center in your resume and interview responses
    — “Practical knowledge of federated identity concepts (SAML, OIDC), PingFederate, Keycloak, and AWS IAM Identity Center (IDC)”
  • Showcase your ability to codify identity and access policies using Terraform
    — “Codifying identity resources, group definitions, access policies, and cloud infrastructure using Terraform”
  • Highlight your track record in enforcing least privilege access models in cloud environments
    — “Enforcing Least Privilege access models across AWS CodeCommit, development repositories, and cloud workloads”
  • Demonstrate your skills in automating user lifecycle processes across identity platforms
    — “Automating user onboarding/offboarding pipelines and permission requests across GitLab, AWS, and PingFederate/Keycloak”
  • Include examples of managing permissions in GitLab and AWS CodeCommit in your application materials
    — “Hands-on experience managing permissions in GitLab (groups/projects) and working with AWS CodeCommit”
Pace · SteadyCollaboration · MediumAutonomy · MediumDecision Impact · Team

Derived from job-description analysis by Serendipath's career intelligence engine.

What success looks like

  • successful management of AAA controls
  • implementation of least privilege access models
Typical background
2+ years of hands-on experience in cloud identity management, IAM, or cloud infrastructure operations

Skills & requirements

Required

Cloud Identity ManagementIAMInfrastructure As CodeAuthenticationAuthorizationSecrets ManagementAccess Control

Preferred

AWS Certified Security – SpecialtyAWS Certified Solutions Architect – AssociatePing Identity / Keycloak Certifications

Stack & domain

Cloud Identity ManagementIAMCloud Infrastructure OperationsFederated IdentitySAMLOIDCTerraformGitLabAWSSecrets ManagerAAA PrinciplesRbac/abac ModelsIdentity Lifecycle ManagementProblem-solvingTeamworkAttention To DetailCommunicationTime ManagementAWS Certified Security – SpecialtyAWS Certified Solutions Architect – AssociatePing Identity / Keycloak CertificationsCloud SecurityIdentity ManagementInfrastructure As Code

About the role

Original posting from Dark Wolf Solutions via Greenhouse

Dark Wolf is seeking a mid-level Cloud Identity & Security Engineer to manage and automate our access governance across hybrid identity engines and AWS cloud environments. In this role, you will be responsible for administering end-to-end AAA (Authentication, Authorization, and Accounting) controls using Infrastructure as Code (Terraform). You will configure and maintain group memberships, repository permissions, secrets management, and enterprise Single Sign-On (SSO) integrations spanning PingFederate, Keycloak, GitLab, AWS Landing Zone Accelerator (LZA), and AWS IAM Identity Center (IDC).

Key Responsibilities

Authentication & Identity Engine Management (BYOI):

Administering identity federation and user authentication workflows across PingFederate and Keycloak.

Integrating multi-factor authentication (MFA) and Single Sign-On (SSO) protocols (SAML 2.0, OIDC) between enterprise identity providers and cloud services.

Provisioning and maintaining user accounts, group assignments, and directory memberships across identity platforms.

Authorization & Access Control (AWS & GitLab):

Managing fine-grained permission models, roles, and group memberships within AWS IAM Identity Center (IDC) and GitLab repositories/groups.

Implementing and maintain landing zone configuration changes through AWS Landing Zone Accelerator (LZA) to enforce organizational boundary policies and Service Control Policies (SCPs).

Enforcing Least Privilege access models across AWS CodeCommit, development repositories, and cloud workloads.

Secrets Management & Accounting:

Configuring and maintain key-value secrets, database credentials, and API keys within AWS Secrets Manager, ensuring automated rotation and secure access policies.

Auditing identity lifecycle workflows, repository permissions, and access logs to ensure compliance with security baselines.

Infrastructure as Code (IaC) & Automation:

Codifying identity resources, group definitions, access policies, and cloud infrastructure using Terraform.

Automating user onboarding/offboarding pipelines and permission requests across GitLab, AWS, and PingFederate/Keycloak.

Qualifications & Requirements

2+ years of hands-on experience in cloud identity management, IAM, or cloud infrastructure operations.

Practical knowledge of federated identity concepts (SAML, OIDC), PingFederate, Keycloak, and AWS IAM Identity Center (IDC).

Strong proficiency with Terraform for provisioning cloud resources, IAM policies, and identity group memberships.

Hands-on experience managing permissions in GitLab (groups/projects) and working with AWS CodeCommit, AWS Secrets Manager, and AWS Landing Zone Accelerator (LZA).

Solid understanding of AAA principles, RBAC/ABAC models, and identity lifecycle management.

AWS Certified Security – Specialty, AWS Certified Solutions Architect – Associate, or Ping Identity / Keycloak certifications.

The estimated salary range for this position is $90,000.00 - $150,000.00, commensurate on experience and technical skillset. 

We are strictly looking for direct, full-time W2 employees. We do not engage with third-party staffing agencies, C2C, or 1099 independent contractors for this role.

We are proud to be an EEO/AA employer Minorities/Women/Veterans/Disabled and other protected categories.

In compliance with federal law, all persons hired will be required to verify identity, confirm US Citizenship, and complete the required employment eligibility verification upon hire.

Source: Dark Wolf Solutions careers (Greenhouse)

Similar roles