> Markdown version of [/jobs/ext/4248365-cloud-identity-and-security-engineer](https://www.wearedevelopers.com/jobs/ext/4248365-cloud-identity-and-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cloud Identity and Security Engineer

- **Company:** BuddoBot Inc.
- **Location:** Ogden, UT, United States
- **Experience:** Experienced
- **Salary:** $90,000.0 - $150,000.0
- **Contract:** Permanent contract
- **Skills:** Application Programming Interfaces (APIs), Amazon Web Services, User Authentication, Cloud Computing, Databases, System Configuration, Multi-Factor Authentication, Federated Identity Management, Identity and Access Management, Key Management, OpenID, Role-Based Access Control, Cloud Services, Security Assertion Markup Language (SAML), Single Sign-On, Systems Integration, Okta, Infrastructure as Code (IaC), Gitlab, Pingfederate, CIS Benchmarks, Terraform, User Accounts
- **Published:** October 18, 2026
- **Apply:** https://diversityjobs.com/career/18691139/Cloud-Identity-Security-Engineerogden-Ut-Utah-Ogden

## About the Role

* 2+ years of hands-on experience in cloud identity management, IAM, or cloud infrastructure operations.
 * Practical knowledge of federated identity concepts (SAML, OIDC), PingFederate, Keycloak, and AWS IAM Identity Center (IDC).
 * Strong proficiency with Terraform for provisioning cloud resources, IAM policies, and identity group memberships.
 * Hands-on experience managing permissions in GitLab (groups/projects) and working with AWS CodeCommit, AWS Secrets Manager, and AWS Landing Zone Accelerator (LZA).
 * Solid understanding of AAA principles, RBAC/ABAC models, and identity lifecycle management.
 * AWS Certified Security - Specialty, AWS Certified Solutions Architect - Associate, or Ping Identity / Keycloak certifications.

## Description

Dark Wolf is seeking a mid-level Cloud Identity & Security Engineer to manage and automate our access governance across hybrid identity engines and AWS cloud environments. In this role, you will be responsible for administering end-to-end AAA (Authentication, Authorization, and Accounting) controls using Infrastructure as Code (Terraform). You will configure and maintain group memberships, repository permissions, secrets management, and enterprise Single Sign-On (SSO) integrations spanning PingFederate, Keycloak, GitLab, AWS Landing Zone Accelerator (LZA), and AWS IAM Identity Center (IDC).
Key Responsibilities

 * Authentication & Identity Engine Management (BYOI):

 * Administering identity federation and user authentication workflows across PingFederate and Keycloak.
 * Integrating multi-factor authentication (MFA) and Single Sign-On (SSO) protocols (SAML 2.0, OIDC) between enterprise identity providers and cloud services.
 * Provisioning and maintaining user accounts, group assignments, and directory memberships across identity platforms.

Authorization & Access Control (AWS & GitLab):

 * Managing fine-grained permission models, roles, and group memberships within AWS IAM Identity Center (IDC) and GitLab repositories/groups.
 * Implementing and maintain landing zone configuration changes through AWS Landing Zone Accelerator (LZA) to enforce organizational boundary policies and Service Control Policies (SCPs).
 * Enforcing Least Privilege access models across AWS CodeCommit, development repositories, and cloud workloads.

Secrets Management & Accounting:

 * Configuring and maintain key-value secrets, database credentials, and API keys within AWS Secrets Manager, ensuring automated rotation and secure access policies.
 * Auditing identity lifecycle workflows, repository permissions, and access logs to ensure compliance with security baselines.

Infrastructure as Code (IaC) & Automation:

 * Codifying identity resources, group definitions, access policies, and cloud infrastructure using Terraform.
 * Automating user onboarding/offboarding pipelines and permission requests across GitLab, AWS, and PingFederate/Keycloak.