Cloud Identity Engineer

Description

Employer:

LHM Inc. (dba The Larry H. Miller Company)
Job Details

Job Title: Cloud Identity Engineer

Degree

Required:

Bachelor’s degree or equivalent foreign education

Academic Discipline(s): Computer Science, Information Systems, Cybersecurity, or a closely related field

Experience

Required:

2 years of experience

• Develop and deploy scalable Identity Access Management (IAM) solutions to manage user identities, privileges, and access across enterprise systems.
• Establish and enforce role-based access controls (RBAC), least privilege principles, and segregation of duties (SoD).
• Implement and maintain Single Sign-On (SSO), Multi-Factor Authentication (MFA), and identity federation systems.
• Configure and manage IAM platforms such as Okta, Microsoft Azure AD, Ping Identity, or similar tools.
• Streamline IAM processes through scripting (e.g., Power Shell, Python) and integrations with other IT systems.
• Ensure IAM policies align with security frameworks (e.g., NIST, ISO 27001) and regulatory requirements (e.g., GDPR, HIPAA).
• Investigate and resolve IAM-related security incidents and audit findings.
• Work closely with IT, HR, and compliance teams to onboard/offboard users, manage access requests, and address operational challenges.
• Maintain comprehensive documentation of IAM architectures, policies, and procedures.

This is a hybrid position requiring in-person presence three days per week. Position may telecommute from home within reasonable commuting distance of Sandy, UT.

• Certification:
  Okta Certified Administrator
• Certification:
  Microsoft 365 Administrator Expert
• Knowledge of IAM technologies, including Azure AD, Okta, SailPoint, and Cyber Ark.
• Knowledge of IAM protocols, including SAML, OAuth, OpenID Connect, LDAP, and Kerberos.
• Knowledge of cloud platforms, including AWS, Azure, and Google Cloud.
• Knowledge of programming/scripting with Python, Java, and Powershell.
• Knowledge of security standards, including NIST, CIS Controls, and ISO 27001.
• Knowledge of directory services and identity lifecycle management.

Salary (Annual): $ - $

Work Location:

9350 S 150 E, Ste 900, Sandy UT 84070. This is a hybrid position requiring in-person presence three days per week. Position may telecommute from home within reasonable commuting distance of Sandy, UT.

Hours of Work:
Usually 8 a.m. to 5 p.m., Monday through Friday

Applicants who fail to provide a résumé and pre-screening question responses will not be considered.