Cloud Identity and Security Engineer
Dark Wolf Solutions is hiring a mid-level Cloud Identity & Security Engineer in Ogden, UT to manage and automate access governance across hybrid identity engines (PingFederate, Keycloak) and AWS using Terraform — administering SSO/MFA federation, GitLab and AWS permissions, secrets management, and identity lifecycle auditing.
- Compensation
- $90K–$150K / yr
- Location
- Ogden, UT
- Work setup
- Not specified
- Seniority
- Middle
- Employment
- Contract
- Experience
- 2+ years
- Category
- Security
- Posted
Skills
Must have
- 2+ years hands-on experience in cloud identity management, IAM, or cloud infrastructure operations
- Practical knowledge of federated identity concepts (SAML, OIDC), PingFederate, Keycloak, and AWS IAM Identity Center (IDC)
- Strong proficiency with Terraform for provisioning cloud resources, IAM policies, and identity group memberships
- Hands-on experience managing permissions in GitLab (groups/projects)
- Hands-on experience with AWS CodeCommit, AWS Secrets Manager, and AWS Landing Zone Accelerator (LZA)
- Solid understanding of AAA principles, RBAC/ABAC models, and identity lifecycle management
- US Citizenship required with employment eligibility verification upon hire
Nice to have
- AWS Certified Security – Specialty, AWS Certified Solutions Architect – Associate, or Ping Identity / Keycloak certifications
Full description
Dark Wolf is seeking a mid-level Cloud Identity & Security Engineer to manage and automate our access governance across hybrid identity engines and AWS cloud environments. In this role, you will be responsible for administering end-to-end AAA (Authentication, Authorization, and Accounting) controls using Infrastructure as Code (Terraform). You will configure and maintain group memberships, repository permissions, secrets management, and enterprise Single Sign-On (SSO) integrations spanning PingFederate, Keycloak, GitLab, AWS Landing Zone Accelerator (LZA), and AWS IAM Identity Center (IDC).
Key Responsibilities
- Authentication & Identity Engine Management (BYOI):
- Administering identity federation and user authentication workflows across PingFederate and Keycloak.
- Integrating multi-factor authentication (MFA) and Single Sign-On (SSO) protocols (SAML 2.0, OIDC) between enterprise identity providers and cloud services.
- Provisioning and maintaining user accounts, group assignments, and directory memberships across identity platforms.
- Authorization & Access Control (AWS & GitLab):
- Managing fine-grained permission models, roles, and group memberships within AWS IAM Identity Center (IDC) and GitLab repositories/groups.
- Implementing and maintain landing zone configuration changes through AWS Landing Zone Accelerator (LZA) to enforce organizational boundary policies and Service Control Policies (SCPs).
- Enforcing Least Privilege access models across AWS CodeCommit, development repositories, and cloud workloads.
- Secrets Management & Accounting:
- Configuring and maintain key-value secrets, database credentials, and API keys within AWS Secrets Manager, ensuring automated rotation and secure access policies.
- Auditing identity lifecycle workflows, repository permissions, and access logs to ensure compliance with security baselines.
- Infrastructure as Code (IaC) & Automation:
- Codifying identity resources, group definitions, access policies, and cloud infrastructure using Terraform.
- Automating user onboarding/offboarding pipelines and permission requests across GitLab, AWS, and PingFederate/Keycloak.
Qualifications & Requirements
- 2+ years of hands-on experience in cloud identity management, IAM, or cloud infrastructure operations.
- Practical knowledge of federated identity concepts (SAML, OIDC), PingFederate, Keycloak, and AWS IAM Identity Center (IDC).
- Strong proficiency with Terraform for provisioning cloud resources, IAM policies, and identity group memberships.