Cloud Identity & Security Engineer — IAM, SSO & IaC

Dark Wolf Solutions, LLC; Ogden (UT); On-site; USD 90,000 - 150,000; Full time

Job summary

Dark Wolf Solutions, LLC seeks a mid-level Cloud Identity & Security Engineer to manage access governance across hybrid identity engines and AWS environments. You will administer AAA controls using Terraform, configure group memberships, secrets, and enterprise SSO integrations spanning PingFederate, Keycloak, GitLab, and AWS IDC.

You will implement least-privilege access, enforce SCPs with LZA, and automate onboarding/offboarding across GitLab and AWS while ensuring compliance with security

Qualifications

• 2+ years of hands-on experience in cloud identity management, IAM, or cloud infrastructure operations.
• Knowledge of federated identity concepts (SAML, OIDC), PingFederate, Keycloak, and AWS IAM Identity Center (IDC).
• Strong proficiency with Terraform for provisioning cloud resources, IAM policies, and identity group memberships.
• Experience managing permissions in GitLab and AWS CodeCommit/Secrets Manager/LZA.
• Understanding AAA principles, RBAC/ABAC, and identity lifecycle management.
• Certifications: AWS Certified Security – Specialty, AWS Certified Solutions Architect – Associate, or Ping Identity / Keycloak certifications.

Responsibilities

• Authentication & Identity Engine Management: Administering identity federation and user authentication workflows across PingFederate and Keycloak.
• Integrating MFA and SSO protocols (SAML 2.0, OIDC) between enterprise identity providers and cloud services.
• Provisioning and maintaining user accounts, group assignments, and directory memberships.
• Authorization & Access Control: Managing permissions in AWS IDC and GitLab repositories/groups.
• Implementing and maintaining landing zone configuration changes through AWS Landing Zone Accelerator (LZA).
• Enforcing least privilege across AWS CodeCommit, development repositories, and cloud workloads.
• Secrets Management & Auditing: Configuring and maintaining key-value secrets, credentials, and API keys; auditing lifecycle workflows.
• IaC & Automation: Codifying identity resources with Terraform and automating onboarding/offboarding pipelines across GitLab, AWS, PingFederate/Keycloak.

Skills

Cloud IAM

Terraform

GitLab access

AWS IDC

RBAC/ABAC

MFA/SAML/OIDC

Tools

PingFederate

Keycloak

AWS Secrets Manager

AWS Landing Zone Accelerator

LZA

Job description

Dark Wolf Solutions, LLC seeks a mid-level Cloud Identity & Security Engineer to manage access governance across hybrid identity engines and AWS environments. You will administer AAA controls using Terraform, configure group memberships, secrets, and enterprise SSO integrations spanning PingFederate, Keycloak, GitLab, and AWS IDC.

You will implement least-privilege access, enforce SCPs with LZA, and automate onboarding/offboarding across GitLab and AWS while ensuring compliance with security