Senior Cloud Identity Architect – IAM & Zero Trust Leader

Koch; Plano (TX); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Medical Insurance

Dental Insurance

Vision Insurance

HSA/FSA

Retirement Plan

Paid Time Off

Educational Assistance

Parental Leave

Job summary

Koch Industries is seeking a Lead Cloud Identity Engineer to join a global IAM team supporting authentication and identity services across Koch businesses. You will design, implement, and govern scalable identity platforms with emphasis on security and reliability.

Collaborate with architects, engineers, and security teams worldwide, mentoring engineers and driving hands-on development of SSO, federation, and IAM automation using Terraform and CI/CD pipelines.

Qualifications

• Experience owning identity platforms at scale and implementing SSO/federation.
• Solid experience with Azure Entra ID, AWS IAM, or Google Cloud Identity.
• Hands-on design of IAM infrastructure across multi-cloud environments.
• Proficient coding in Python and/or TypeScript with CI/CD and API integrations.
• Experience with JML automation and entitlement/workflow design.

Responsibilities

• Set IAM architecture, standards, and reusable patterns for SSO and MFA.
• Lead design governance and reviews for new apps and platform changes.
• Engineer authentication and federation with SAML2, OAuth2/OIDC, WS-Fed, FIDO2.
• Operate and enhance enterprise identity services (PingOne or equivalents).
• Drive hands-on development of identity platforms, connectors, APIs.
• Build RBAC/ABAC/PBAC models and access workflows (IGA).
• Lead end-to-end JML automation integrating HRIS, ITSM, and apps.
• Manage identity configuration with Terraform and CI/CD pipelines.

Skills

SAML/OIDC

OAuth2

SCIM

FIDO2/passkeys

Azure Entra ID

AWS IAM

GCP Identity

Python

TypeScript

CI/CD

Terraform

RBAC/ABAC/PBAC

JML automation

Identity governance

Tools

PingOne

PingOne DaVinci

Okta Workflows

SailPoint IdentityNow/IdentityIQ

Terraform

Job description

Koch Industries is seeking a Lead Cloud Identity Engineer to join a global IAM team supporting authentication and identity services across Koch businesses. You will design, implement, and govern scalable identity platforms with emphasis on security and reliability.

Collaborate with architects, engineers, and security teams worldwide, mentoring engineers and driving hands-on development of SSO, federation, and IAM automation using Terraform and CI/CD pipelines.