Senior Cloud DevOps Engineer - Identity Management

The Opportunity:Join a forward-thinking cloud engineering team responsible for designing, securing, and maintaining enterprise identity and access management systems.Lead the integration and automation of identity services across hybrid cloud and on-premises infrastructures.• Drive the modernization of authentication, authorization, and secrets management capabilities using Keycloak, HashiCorp Vault, and related technologies.• Collaborate with cybersecurity, DevSecOps, and infrastructure teams to enhance security posture and streamline identity workflows.• Play a critical role in ensuring seamless, secure, and scalable access to secure multi-cloud and on-prem systems across the organization.Responsibilities:• Architect, deploy, and maintain Keycloak identity management systems in hybrid and multi-cloud environments.• Implement and manage secrets management solutions using HashiCorp Vault, including dynamic secrets, PKI, and access policies.• Integrate cloud-native and on-prem identity stores (e.g., AWS IAM, Azure AD, LDAP, Active Directory) into unified ICAM architectures.• Develop and automate CI/CD pipelines for deploying and maintaining ICAM-related infrastructure as code (IaC).• Define and enforce security policies for authentication, authorization, and token management across distributed systems.• Collaborate with security teams to implement Zero Trust and least-privilege access principles.• Configure and maintain high availability, backup, and recovery strategies for Keycloak and Vault services.• Monitor, troubleshoot, and optimize performance and reliability of identity systems and associated integrations.• Maintain documentation of configurations, operational procedures, and identity management standards.• Support compliance initiatives by ensuring alignment with NIST, FedRAMP, and organizational security frameworks.Qualifications:• Bachelor’s degree in Computer Science, Information Systems, or related technical field.• 5+ years of experience in DevOps, Cloud Engineering, or Infrastructure Automation roles.• Hands-on experience managing Keycloak, HashiCorp Vault, or comparable IAM and secrets management tools.• Strong understanding of identity federation (SAML, OIDC, OAuth2) and directory integration concepts.• Proficiency with infrastructure as code (Terraform, Ansible, or CloudFormation).• Experience with at least one major cloud provider (AWS, Azure, or GCP) and hybrid integration patterns.• Strong scripting skills in Bash, Python, or Go for automation and operational tasks.• Solid understanding of networking, PKI, TLS, and secure service-to-service communication.• Demonstrated ability to troubleshoot complex system and identity-related issues in production environments.Desired:• Experience implementing Zero Trust architectures or enterprise ICAM modernization initiatives.• Knowledge of Kubernetes, containerized deployments, and service mesh identity integration.• Familiarity with regulatory compliance frameworks (FedRAMP, DoD RMF, ISO 27001).• Experience with GitOps workflows and CI/CD tools such as GitLab CI, Jenkins, or ArgoCD.• Relevant certifications such as HashiCorp Certified Vault Associate, Certified Kubernetes Administrator (CKA), or AWS Certified DevOps Engineer.Level Description: Recognized subject matter expert Manages large projects Limited oversight from manager Coaches, reviews and delegates work to lower level technical team members Problems faced are difficult and often complex Influences others regarding policies, practices, and proceduresOrganizational Impact: Works to achieve operational targets with major impact on the departmental results. Contributes to the development of goals for the department and planning efforts (budgets, operational plans, etc.). May manage large projects or processes that span outside of immediate job area. Work is performed with minimal oversight.Innovation & Complexity: Demonstrates innovative influence for Business Groups or projects. Responsible for making moderate to significant improvements of systems or products to enhance performance of program/project. Problems and issues faced are numerous and undefined, and require detailed information gathering, analysis and investigation to understand the problem. Regularly employs ingenuity and creativity to develop new technical solutions to solve difficult and moderately complex problems. Problems typically impact multiple departments or specialties. Problems are typically solved through drawing from prior experience and analysis of issues.Communication & Influence: Communicates with parties within and outside of own job function. Typically has responsibility for communicating with parties external to the organization (e.g., customers, vendors, etc.) Works to influence project/team leaders within and outside of the job function at project/program regarding solution design, process, and/or approachesLeadership & Talent Management: Typically, responsible for providing guidance, coaching and training to other employees within technical discipline. Typically, responsible for leading large or complex projects that involve technically challenging requirements at this level, involving delegation of work and review of work products.Knowledge & Experience: Requires deep knowledge of job area typically obtained through advanced education combined with experience. Typically viewed as having a specialty within discipline. May have broad knowledge of project management. Typically has a University Degree (BA/BS) or equivalent experience and minimum 7 years of related workFinancial Responsibility: N/AProgram Headcount: N/ADepartment:Infrastructure/System Administration