Senior Cloud DevOps Engineer — ICAM & Identity Management

CACI International; San Antonio (TX); On-site; USD 86,000 - 180,000; Full time

Job summary

CAC I International is seeking a Senior Cloud DevOps Engineer focused on Identity Management. You will architect, deploy, and secure Keycloak and Vault across hybrid/multi-cloud environments, integrating enterprise identities such as AWS IAM and Azure AD.

You will build CI/CD pipelines for ICAM infra, enforce zero-trust policies, and ensure high availability and secure access across systems. The role requires strong IAM, federation knowledge, and IaC expertise with

Qualifications

• Bachelor’s degree in a technical field.
• 5+ years in DevOps, Cloud Engineering, or Infrastructure Automation.
• Hands-on with Keycloak, Vault, IAM and secrets tools.
• Strong understanding of identity federation and directory integration.
• IaC: Terraform, Ansible, or CloudFormation.
• Experience with at least one cloud provider and hybrid patterns.

Responsibilities

• Architect, deploy, and maintain Keycloak in hybrid/multi-cloud.
• Manage Vault secrets, PKI, and access policies.
• Integrate AWS IAM, Azure AD, LDAP/AD into ICAM.
• Develop and automate CI/CD for ICAM IaC.
• Define security policies for authentication and token management.
• Collaborate on Zero Trust and least-privilege principles.
• Ensure high availability, backup, and recovery for Keycloak/Vault.
• Monitor, troubleshoot, and improve identity systems.
• Document configurations and identity standards.
• Support compliance with NIST, FedRAMP, and security frameworks.

Skills

Keycloak

HashiCorp Vault

IAM

SAML

OIDC

Terraform

Ansible

CloudFormation

Bash

Python

Go

Education

Bachelor’s degree in Computer Science, Information Systems, or related technical field

Tools

AWS

Azure

GCP

Job description

CAC I International is seeking a Senior Cloud DevOps Engineer focused on Identity Management. You will architect, deploy, and secure Keycloak and Vault across hybrid/multi-cloud environments, integrating enterprise identities such as AWS IAM and Azure AD.

You will build CI/CD pipelines for ICAM infra, enforce zero-trust policies, and ensure high availability and secure access across systems. The role requires strong IAM, federation knowledge, and IaC expertise with