{"id":2875524,"url":"https://alion.io/job/dark-wolf-solutions-cloud-identity-and-security-engineer","title":"Cloud Identity and Security Engineer","company":{"id":716229,"name":"Dark Wolf Solutions","domain":"darkwolf.io","url":"https://alion.io/company/darkwolf","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":95,"open_postings":11,"ghost_share":0,"stale_share":0.182,"repost_share":0,"time_to_fill_p50_days":55,"computed_at":"2026-10-25T05:49:26Z"}},"role":"Security","role_family":"Security","seniority":"junior","employment_type":"contractor","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Ogden, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":90000,"max":150000,"currency":"USD","period":"year","gross":null,"usd_annual":150000},"salary_estimate":null,"experience_years_min":2,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"GitLab","optional":false},{"name":"IAM","optional":false},{"name":"Keycloak","optional":false},{"name":"Least Privilege","optional":false},{"name":"Ping Identity","optional":false},{"name":"Terraform","optional":false}],"status":"live","first_seen_at":"2026-10-19T17:54:11Z","employer_posted_date":"2026-10-19","last_verified_at":"2026-10-26T02:37:29Z","board_verified":true,"closed_at":null,"days_open":6,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":6},"description":"Dark Wolf is seeking a mid-level Cloud Identity & Security Engineer to manage and automate our access governance across hybrid identity engines and AWS cloud environments. In this role, you will be responsible for administering end-to-end AAA (Authentication, Authorization, and Accounting) controls using Infrastructure as Code (Terraform). You will configure and maintain group memberships, repository permissions, secrets management, and enterprise Single Sign-On (SSO) integrations spanning PingFederate, Keycloak, GitLab, AWS Landing Zone Accelerator (LZA), and AWS IAM Identity Center (IDC).\nKey Responsibilities\nAuthentication & Identity Engine Management (BYOI):\nAdministering identity federation and user authentication workflows across PingFederate and Keycloak.\nIntegrating multi-factor authentication (MFA) and Single Sign-On (SSO) protocols (SAML 2.0, OIDC) between enterprise identity providers and cloud services.\nProvisioning and maintaining user accounts, group assignments, and directory memberships across identity platforms.\nAuthorization & Access Control (AWS & GitLab):\nManaging fine-grained permission models, roles, and group memberships within AWS IAM Identity Center (IDC) and GitLab repositories/groups.\nImplementing and maintain landing zone configuration changes through AWS Landing Zone Accelerator (LZA) to enforce organizational boundary policies and Service Control Policies (SCPs).\nEnforcing Least Privilege access models across AWS CodeCommit, development repositories, and cloud workloads.\nSecrets Management & Accounting:\nConfiguring and maintain key-value secrets, database credentials, and API keys within AWS Secrets Manager, ensuring automated rotation and secure access policies.\nAuditing identity lifecycle workflows, repository permissions, and access logs to ensure compliance with security baselines.\nInfrastructure as Code (IaC) & Automation:\nCodifying identity resources, group definitions, access policies, and cloud infrastructure using Terraform.\nAutomating user onboarding/offboarding pipelines and permission requests across GitLab, AWS, and PingFederate/Keycloak.\nQualifications & Requirements\n2+ years of hands-on experience in cloud identity management, IAM, or cloud infrastructure operations.\nPractical knowledge of federated identity concepts (SAML, OIDC), PingFederate, Keycloak, and AWS IAM Identity Center (IDC).\nStrong proficiency with Terraform for provisioning cloud resources, IAM policies, and identity group memberships.\nHands-on experience managing permissions in GitLab (groups/projects) and working with AWS CodeCommit, AWS Secrets Manager, and AWS Landing Zone Accelerator (LZA).\nSolid understanding of AAA principles, RBAC/ABAC models, and identity lifecycle management.\nAWS Certified Security - Specialty, AWS Certified Solutions Architect - Associate, or Ping Identity / Keycloak certifications.\nThe estimated salary range for this position is $90,000.00 - $150,000.00, commensurate on experience and technical skillset. \nWe are strictly looking for direct, full-time W2 employees. We do not engage with third-party staffing agencies, C2C, or 1099 independent contractors for this role.\nWe are proud to be an EEO/AA employer Minorities/Women/Veterans/Disabled and other protected categories.\nIn compliance with federal law, all persons hired will be required to verify identity, confirm US Citizenship, and complete the required employment eligibility verification upon hire.","description_format":"text","description_chars":3450,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security","DevSecOps","Managed Security","Custom Software Development"],"lifecycle":[{"event":"open","at":"2026-10-19T21:18:42Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":5,"expected_fill_days":55,"reasons":["conf:2","velocity","win:early","comp:junior"],"computed_at":"2026-10-25T05:49:26Z"},"pay":{"stated_usd_annual":150000,"is_top_pay":true},"html_url":"https://alion.io/job/dark-wolf-solutions-cloud-identity-and-security-engineer","json_url":"https://alion.io/job/dark-wolf-solutions-cloud-identity-and-security-engineer.json","meta":{"generated_at":"2026-10-26T03:44:34Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":5064,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-27T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":716229},"rest":"https://alion.io/mcp/rest/get_company?id=716229"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdark-wolf-solutions-cloud-identity-and-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdark-wolf-solutions-cloud-identity-and-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdark-wolf-solutions-cloud-identity-and-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/dark-wolf-solutions-cloud-identity-and-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdark-wolf-solutions-cloud-identity-and-security-engineer"}]}