Specialist - Cloud Engineering

Job Posting

Role: Cloud Developer Engineer

Location: Chandler, AZ (3 days onsite)

Must have Skills: Cloud Developer Engineer, HandsOn Identity Automation, DevOps, Pingfederate, OKTA, MFA, Azure ID, AWS, Cloud Security Engineer

Required Skills:

• Primary Skills:
• AWS and Azure Identity solution engineering automation Terraform mandatory CICD deployment documentation and operational support
• 7 years of Cloud Development Engineering experience delivering complex enterprise-scale identity and security solutions
• Strong hands-on experience implementing AWS identity services
• AWS Identity Center, AWS SSO permission sets, account assignments, governance, AWS IAM roles, policies, trust relationships, least-privilege design, MFA, AWS multi-account environments, and AWS Organizations
• Experience integrating enterprise IdPs with AWS PingFederate preferred including SAML/OIDC federation and SCIM provisioning
• Strong experience implementing Microsoft Entra ID Azure AD identity automation Service Principals SPNs App Registrations Enterprise Applications Role assignment automation and least-privilege patterns Conditional Access deployment with safe rollout strategies
• Terraform MANDATORY experience developing modules managing remote state environment separation and secure variable handling
• Application onboarding to Entra ID DevOps and CICD pipeline engineering using Horizon Jenkins CircleCI and Bitbucket
• Ability to design secure auditable and scalable identity deployment pipelines
• Strong scripting experience with PowerShell and/or Python
• Strong understanding of identity security best practices threat mitigation and access governance
• In-depth knowledge of SSO MFA SAML OAuth2/OIDC token flows and federation technologies
• Experience with monitoring logging and compliance reporting for identity systems
• Experience using REST APIs Graph API and CICD best practices
• Ability to serve as a hands-on SME and collaborate across Security Cloud Audit and Operations teams
• Excellent communication skills with ability to articulate technical concepts to technical and non-technical audiences

Desired Skills:

• Bachelor’s degree in computer science Information Security or equivalent experience
• Microsoft Azure Security Engineer AZ500 certification
• AWS Certified Security Specialty certification
• Experience with PingFederate administration and federation troubleshooting
• Experience building event-to-ticket workflows e.g. ServiceNow
• Knowledge of Certificate/CA/PKI infrastructure and certificate-based authentication
• Experience with encryption and key management tools and processes

Skills:

• Mandatory Skills: AWS Automation Services, AWS DevOps Services, Jenkins, Terraform