Cloud Engineer- Full Time Role
Role summary
The Cloud Engineer will focus on identity and security solutions within hybrid cloud environments, primarily leveraging AWS and Azure. This role requires hands-on experience in automating identity processes, implementing robust security controls, and engineering CI/CD pipelines. Key responsibilities include designing and deploying identity solutions, managing cloud infrastructure with Terraform, and ensuring secure, auditable, and scalable systems. The engineer will act as a subject matter expert, collaborating with various teams to mitigate threats and govern access effectively. Strong scripting and a deep understanding of identity protocols are essential for this role.
Role: Cloud Engineer
Location: Chandler, AZ (Hybrid)
Duration: Full Time
Skills
Mandatory Skills :
AWS Automation Services, AWS DevOps Services, Jenkins, Terraform
Must have Skills
Cloud Developer Engineer HandsOn Identity Automation DevOps, Pingfederate, OKTA, MFA, Azure ID, AWS, Cloud Security Engineer
Required Skills
Primary Skills AWS and Azure Identity solution engineering automation Terraform mandatory CICD deployment documentation and operational support
- 8+ years of Cloud DevelopmentEngineering experience delivering complex enterprisescale identity and security solutions
- Strong handson experience implementing AWS identity services
- AWS Identity Center AWS SSO permission sets account assignments governance
- AWS IAM roles policies trust relationships leastprivilege design MFA
- AWS multiaccount environments and AWS Organizations
- Experience integrating enterprise IdPs with AWS PingFederate preferred including SAMLOIDC federation and SCIM provisioning
- Strong experience implementing Microsoft Entra ID Azure AD identity automation
- Service Principals SPNs App Registrations Enterprise Applications
- Role assignment automation and leastprivilege patterns
- Conditional Access deployment with safe rollout strategies
- Terraform MANDATORY experience developing modules managing remote state environment separation and secure variable handling
- Application onboarding to Entra ID
- DevOps and CICD pipeline engineering using Horizon Jenkins CircleCI and Bitbucket
- Ability to design secure auditable and scalable identity deployment pipelines
- Strong scripting experience with PowerShell andor Python
- Strong understanding of identity security best practices threat mitigation and access governance
- Indepth knowledge of SSO MFA SAML OAuth2OIDC token flows and federation technologies
- Experience with monitoring logging and compliance reporting for identity systems
- Experience using REST APIs Graph API and CICD best practices
- Ability to serve as a handson SME and collaborate across Security Cloud Audit and Operations teams
- Excellent communication skills with ability to articulate technical concepts to technical and nontechnical audiences
Desired Skills
- Bachelors degree in computer science Information Security or equivalent experience
- Microsoft Azure Security Engineer AZ500 certification
- AWS Certified Security Specialty certification
- Experience with PingFederate administration and federation troubleshooting
- Experience building eventtoticket workflows eg ServiceNow
- Knowledge of CertificateCAPKI infrastructure and certificatebased authentication
- Experience with encryption and key management tools and processes