Cloud Identity Engineer

Employer: LHM Inc. (dba The Larry H. Miller Company)

Job Title: Cloud Identity Engineer

Degree

Required:

Bachelor’s degree or equivalent foreign education

Academic Discipline(s): Computer Science, Information Systems, Cybersecurity, or a closely related field

Experience

Required:

2 years of experience

Job Description:

• Develop and deploy scalable Identity Access Management (IAM) solutions to manage user identities, privileges, and access across enterprise systems.
• Establish and enforce role-based access controls (RBAC), least privilege principles, and segregation of duties (SoD).
• Implement and maintain Single Sign-On (SSO), Multi-Factor Authentication (MFA), and identity federation systems.
• Configure and manage IAM platforms such as Okta, Microsoft Azure AD, Ping Identity, or similar tools.
• Streamline IAM processes through scripting (e.g., Power Shell, Python) and integrations with other IT systems.
• Ensure IAM policies align with security frameworks (e.g., NIST, ISO 27001) and regulatory requirements (e.g., GDPR, HIPAA).
• Investigate and resolve IAM-related security incidents and audit findings.
• Work closely with IT, HR, and compliance teams to onboard/offboard users, manage access requests, and address operational challenges.
• Maintain comprehensive documentation of IAM architectures, policies, and procedures.

This is a hybrid position requiring in-person presence three days per week. Position may telecommute from home within reasonable commuting distance of Sandy, UT.

Minimum Qualifications:

• Okta Certified Administrator certification
• Microsoft 365 Administrator Expert certification
• Knowledge of IAM technologies, including Azure AD, Okta, SailPoint, and Cyber Ark.
• Knowledge of IAM protocols, including SAML, OAuth, OpenID Connect, LDAP, and Kerberos.
• Knowledge of cloud platforms, including AWS, Azure, and Google Cloud.
• Knowledge of programming/scripting with Python, Java, and Power Shell.
• Knowledge of security standards, including NIST, CIS Controls, and ISO 27001.
• Knowledge of directory services and identity lifecycle management.

Salary (Annual): $ - $

Work Location: 9350 S 150 E, Ste 900, Sandy UT 84070. This is a hybrid position requiring in-person presence three days per week. Position may telecommute from home within reasonable commuting distance of Sandy, UT.

Hours of Work: Usually 8 a.m. to 5 p.m., Monday through Friday

Equal Opportunity Employer This employer is required to notify all applicants of their rights pursuant to federal employment laws. For further information, please review the Know Your Rights notice from the Department of Labor.