Senior Cloud Engineer; IAM

Senior Cloud Engineer – Identity & Access Management

As a Senior Cloud Engineer focused on Identity and Access Management, you will shape and secure our cloud infrastructure while enabling seamless access for students and employees. You will lead the design and implementation of scalable, secure solutions in AWS and act as a trusted expert in IAM architecture, automation, and best practices.

Grade:
Technical 410
Pay Range: $ – $

• Lead the design and implementation of IAM solutions across cloud‑based infrastructure and applications.
• Architect, build, and maintain secure, scalable AWS environments supporting critical business systems.
• Define and implement authentication and identity standards including MFA, OAuth2/OIDC, and SAML.
• Design and maintain infrastructure for servers, storage, networking, and security systems.
• Drive automation initiatives for cloud platforms, including CI/CD pipelines and monitoring systems.
• Monitor system performance, capacity, and availability to ensure reliability and uptime.
• Mentor Cloud Engineers while contributing to documentation, standards, and best practices.

• Bachelor’s degree in Information Technology or related field.
• 7+ years of related experience, with at least 3 years in AWS Cloud Services.
• CISSP or equivalent knowledge and experience in information security.
• 5+ years of hands‑on experience in Information Security, Security Engineering, Cloud Security Engineering, or Network Security Engineering.
• Comprehensive knowledge of AWS core technologies (EKS, S3, RDS, EC2, SQS, IAM, Route
  53, Lambda, DynamoDB).
• Extensive experience with IAM technologies including SSO, MFA, privileged access management, Ping Identity, Microsoft EntraID, SailPointIIQ, and Cyber Ark.
• Strong administration knowledge of Linux.
• Experience scripting or programming in Bash, Java, Python, or Node.js.
• Experience building distributed, scalable, and highly available systems.
• Understanding of Dev Ops, CI/CD, Git Flow, and tools such as Jenkins or Travis.
• Experience with configuration management tools such as Chef, Salt Stack, or Terraform.
• Experience with monitoring platforms such as Cloud Watch, New Relic, or Nagios.
• Knowledge of identity governance and lifecycle management, including JML and SSPR.
• Practical experience with Zero Trust Architecture and securing infrastructure systems.
• Experience with incident response, intrusion detection, firewalls, antivirus, and centralized logging.
• Strong communication, documentation, and analytical skills.
• Self‑starter mindset with the ability to work autonomously and collaboratively.

• Experience with Chef and/or Terraform.
• Experience with VMware vSphere and vRealize Automation.
• Experience with front‑end frameworks such as React or Angular.
• Experience in lieu of education equivalent relevant experience performing the essential functions of this job may substitute for education degree requirements.

• Medical, dental, vision, telehealth, and mental health care.
• Health savings account and flexible spending account.
• Basic and voluntary life insurance.
• Disability coverage.
• Accident, critical illness and hospital indemnity supplemental coverages.
• Legal and identity theft coverage.
• Retirement savings plan.
• Wellbeing program.
• Discounted WGU tuition.
• Flexible paid time off for rest and relaxation with no need for accrual.
• Flexible paid sick time with no need for accrual.
• 11 paid holidays and other paid leaves, including up to 12 weeks of parental leave.

This is a full‑time, in‑office position requiring five days per week in our Salt Lake City, Utah office.

All qualified applicants will receive consideration for employment without regard to any protected characteristic as required by law.