Identity Infrastructure Engineer - Contractor LATAM, Remote

Tbwa Chiat/Day Inc; New Mexico; Remote; USD 80,000 - 100,000; Full time

Job summary

An established industry player is looking for an Identity Infrastructure Engineer to lead their cloud application identity migration initiative. This role involves migrating authentication solutions from legacy systems to modern identity solutions, ensuring compliance with security standards, and working closely with cross-functional teams. The ideal candidate will have extensive experience with AWS services, identity protocols, and tools like Okta and Active Directory. Join a forward-thinking firm dedicated to delivering high-quality solutions and fostering an inclusive workplace where your expertise will make a significant impact.

Qualifications

• 5+ years of hands-on experience with AWS services.
• Deep knowledge of identity protocols like SAML and OAuth.
• Strong experience with identity federation solutions.

Responsibilities

• Contribute to migration paths between identity providers and directory services.
• Execute migration plans across multiple applications and systems.
• Document existing identity components and analyze authentication path issues.

Skills

AWS services

identity federation solutions

identity protocols (SAML, OAuth, OIDC)

Okta

Active Directory

LDAP

infrastructure as code tools (CloudFormation, Terraform)

CI/CD pipelines

DevSecOps practices

Tools

CloudFormation

Terraform

Job description

Identity Infrastructure Engineer - Contractor

Mexico, Remote

About us:

Working at Tech Holding isn't just a job, it's an opportunity to be a part of something bigger. We are a full-service consulting firm that was founded on the premise of delivering predictable outcomes and high-quality solutions to our clients. Our founders and team members have industry experience and have held senior positions in a wide variety of companies – from emerging startups to large Fortune 50 firms – and we have taken our combined experiences and developed a unique approach that is supported by the principles of deep expertise, integrity, transparency, and dependability.

About the Role

We are seeking an experienced Identity Infrastructure Engineer to drive our cloud application Identity Provider (IdP) migration initiative. This role will be responsible for migrating authentication and authorization solutions from legacy identity providers to modern identity solutions, ultimately enabling the full deprecation of virtualized application streaming services.

In this role, you will work with a cross-functional team to design and implement secure identity solutions while ensuring seamless transitions for users and applications. The ideal candidate has extensive experience with cloud identity services, directory services, and modern authentication systems.

Key Responsibilities

Technical Leadership & Architecture

• Contribute to the migration paths between identity providers and directory services
• Architect solutions addressing immediate authentication requirements
• Develop comprehensive identity architecture for sunsetting legacy systems
• Ensure all solutions comply with enterprise security standards
• Troubleshoot complex identity and access management issues

System Integration & Implementation

• Execute migration plans across multiple applications and systems
• Integrate with various cloud services and identity providers
• Build and maintain infrastructure as code (IaC) for identity solutions
• Develop automated identity workflows and migration processes

Discovery & Documentation

• Document existing identity components, directory integrations, and application dependencies
• Analyze and resolve authentication path issues
• Assess identity architecture security posture and recommend improvements
• Work directly with application owners to understand and address specific authentication needs
• Coordinate with security teams to ensure compliance with security requirements
• Communicate effectively about migration status, timelines, and risk mitigation
• Provide regular status updates and documentation of completed work

Qualifications

Required Skills & Experience

• 5+ years of hands-on experience with AWS services
• 3+ years of experience implementing and managing identity federation solutions
• Deep knowledge of identity protocols (SAML, OAuth, OIDC, etc.)
• Strong experience with Okta, Active Directory, and LDAP
• Practical experience migrating between identity providers
• Experience with Control Tower and cross-account IAM permissions
• Proficiency in infrastructure as code tools (CloudFormation, Terraform)
• Experience with CI/CD pipelines and DevSecOps practices

Nice to Have

• Familiarity with AWS Well-Architected principles
• Previous experience with enterprise-scale identity migrations
• Experience with AWS AppStream or similar virtualization/streaming technologies
• Experience with legacy application authentication refactoring
• AWS Certifications:
• Solutions Architect
• Security Specialty
• SysOps Administrator

Tech Holding is proud to be an Equal Opportunity Employer and is committed to fostering a diverse and inclusive workplace. We welcome applicants from all backgrounds and experiences, and we consider qualified applicants without regard to race, color, religion, gender, sexual orientation, gender identity, national origin, disability, veteran status, or any other legally protected characteristic.