IAM Engineer: OCI Identity & Zero-Trust Architect

Concept-Plus; United States; Remote; USD 120,000 - 160,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Life insurance

Paid time off

11 paid holidays

Performance bonuses

Tuition reimbursement

Job summary

Concept Plus is seeking an Identity / IAM Engineer to design and implement unified identity, federation, and access-governance models across OCI, Exadata Cloud@Customer, and multi-cloud linkages to support client NetOps team.

You will design OCI identity domains, IAM policies, and role/compartment access models, implement identity federation and SSO across OCI, ExaCC, and multi-cloud environments, and support the client NetOps in adopting unified identity, security, and governance models.

Qualifications

• Experience with OCI IAM and identity domains.
• Federation/SSO using SAML, OIDC, SCIM.
• Knowledge of least-privilege and access governance best practices.
• Familiarity with Zero Trust identity patterns.
• Experience in regulated FedRAMP/HIPAA environments.
• Ability to meet client security requirements and obtain clearance.

Responsibilities

• Design OCI identity domains, IAM policies, and access models.
• Implement identity federation and SSO across OCI, ExaCC, and multi-cloud environments.
• Support NetOps in adopting unified identity, security, and governance models.
• Define least-privilege policies and access-governance baselines as reusable templates.
• Integrate IAM controls with Zero Trust access requirements.

Skills

OCI IAM

Identity domain

SSO (SAML/OIDC)

Least privilege

Zero Trust

Security in FedRAMP/HIPAA

Security clearances

Tools

Okta

Ping Identity

Entra ID

Federation protocols

Job description

Concept Plus is seeking an Identity / IAM Engineer to design and implement unified identity, federation, and access-governance models across OCI, Exadata Cloud@Customer, and multi-cloud linkages to support client NetOps team.

You will design OCI identity domains, IAM policies, and role/compartment access models, implement identity federation and SSO across OCI, ExaCC, and multi-cloud environments, and support the client NetOps in adopting unified identity, security, and governance models.