Cloud Identity and Security Engineer
Core
Manage and automate access governance across hybrid identity engines and AWS cloud environments using Infrastructure as Code.
Role type
Mid-level Cloud Identity and Security Engineer
Builds
End-to-end AAA controls, group memberships, secrets management, and enterprise SSO integrations
Domain
Cloud Security, Identity Management, AWS
Required skills
Terraform, AWS IAM Identity Center, PingFederate, Keycloak, GitLab permissions, AWS Secrets Manager, AWS Landing Zone Accelerator, SAML 2.0, OIDC, MFA, RBAC/ABAC, Identity lifecycle management
Preferred skills
AWS Certified Security – Specialty, AWS Certified Solutions Architect – Associate, Ping Identity / Keycloak certifications
Technologies
Terraform, AWS, PingFederate, Keycloak, GitLab, AWS Secrets Manager, AWS Landing Zone Accelerator
Responsibilities
Administer identity federation and user authentication workflows; Integrate multi-factor authentication and SSO protocols; Provision and maintain user accounts and directory memberships; Manage fine-grained permission models and group memberships; Implement landing zone configuration changes to enforce organizational boundary policies; Configure and maintain secrets management with automated rotation; Codify identity resources and cloud infrastructure using Terraform; Automate user onboarding/offboarding pipelines
Seniority
Mid-level, hands-on IC
