Lead Cloud Identity Engineer

Lead Cloud Identity Engineer - United States - 187825 - Koch

Skip to content

Koch Home Page

• Search jobs

• Login

• Candidate Profile

• Employee Login

• Login

• Candidate Profile

• Employee Login

• Home

• Search Jobs

• Life at Koch

• Companies

• Overview

• Koch

• i360

• KBX

• Koch Ag & Energy Solutions

• Koch Minerals and Trading

• Koch Investment Companies

• Koch Disruptive Technologies

• Koch Equity Development

• Koch Engineered Solutions

• Flint Hills Resources

• INVISTA

• Georgia-Pacific

• Molex

• Phillips Medisize

• Guardian Industries

• Guardian Glass

• Infor

• Career Fields

• Hiring Process

• Early Careers

• Military

• Events

• Candidate Portal

• Join our Talent Community

• Employee Login

• Learn More About Koch

• Koch Newsroom

• English - US

• Deutsch

• English - US

• Español - ES

• Français - France

• Polski

• -

• < Back to Search Results

Lead Cloud Identity Engineer

Location(s)

Atlanta, Georgia | Plano, Texas | Wichita, Kansas

Company

Koch

Career Field

Information Systems & Technology

Job Number

187825

Apply now

Share

• Email
• Facebook
• X
• LinkedIn

Your Job

We have an exciting opportunity to hire a Lead Cloud Identity Engineer to join our already skilled engineering team. This individual will be a part of a global team that manages authentication and identity tools and procedures for Koch Industries. Working closely with global colleagues, as well as customers, will provide significant global exposure.

Our Team

The Koch Technology Identity team provides modern Identity solutions and services for all Koch businesses. We are responsible for the entire enterprise in designing innovative services, creating, and sharing best practices, and providing support for our services.

Location: This role requires an in office presence with flexibility in Wichita, KS / Atlanta, GA / or Plano, TX

This role is not eligible for VISA sponsorship

What You Will Do

• Set IAM architecture & standards: Define reusable patterns for SSO/federation, authorization models, privileged access, and workload/machine identity.
• Lead design governance: Run identity design reviews for new applications and major platform changes; approve patterns, manage exceptions, and drive adoption.
• Build authentication & federation: Design and implement SAML2, OAuth2/OIDC, WS-Fed, and FIDO2/passkeys, including adaptive/risk-based auth, conditional access, and MFA.
• Engineer IAM platforms: Operate and enhance enterprise identity services (PingOne / PingOne DaVinci or equivalent orchestration platforms).
• Lead developer for IAM platforms: Serve as lead developer driving hands-on code development to build, extend, and maintain new and existing identity platforms, including custom connectors, APIs, and orchestration flows.
• Design authorization & governance: Build scalable RBAC/ABAC/PBAC models, entitlement catalogs, role engineering, and access request workflows (IGA).
• Automate identity lifecycle: Lead and design end-to-end JML automation integrating HRIS, ITSM, directories, and apps via SCIM and event-driven pipelines.
• Identity as Code: Manage identity configuration/policy using Terraform and CI/CD with testing, version control, and deployment discipline.
• Zero Trust & Detection: Implement least privilege and continuous verification; integrate ITDR-style monitoring, logging, alerting, SLOs, and rapid revocation.
• Incident leadership: Act as escalation for auth outages, federation issues, and credential compromise; lead RCA and post-incident hardening.
• Influence & mentoring: Partner globally with architects, developers, and security; coach engineers through reviews, playbooks, and training.

Who You Are (Basic Qualifications)

• Extensive experience owning identity platforms at scale, with deep protocol-level expertise across SAML, OAuth2/OIDC, SCIM, FIDO2/passkeys, LDAP, and Kerberos.
• Hands-on architecture across Azure Entra ID, AWS IAM, or Google Cloud Identity, including cross-cloud federation and hybrid identity patterns.
• Practical experience designing and building infrastructure across Azure, AWS, or GCP.
• Strong coding skills in Python and/or TypeScript, with API integrations, Git, CI/CD, and automated testing. Delivery of identity configuration as versioned, testable code using Terraform or similar technologies.
• Hands-on experience integrating diverse applications with enterprise governance platforms; design and delivery of JML automation, RBAC/ABAC/PBAC models and access workflows integrating HRIS IAM downstream apps via SCIM and event-driven pipelines.

What Will Put You Ahead

• Experience building multi-step user journeys for Workforce, CIAM, and partner ecosystems using platforms such as PingOne DaVinci or Okta Workflows.
• Hands-on development and design experience with SailPoint IdentityNow/IdentityIQ (or equivalent).
• Real-time detection and response to identity-based threats, integrating signals from IdPs, directories, and SIEM/SOAR platforms.

At Koch companies, we are entrepreneurs. This means we openly challenge the status quo, find new ways to create value and get rewarded for our individual contributions. Any compensation range provided for a role is an estimate determined by available market data. The actual amount may be higher or lower than the range provided considering each candidate''s knowledge, skills, abilities, and geographic location. If you have questions, please speak to your recruiter about the flexibility and detail of our compensation philosophy.

Hiring Philosophy

All Koch companies value diversity of thought, perspectives, aptitudes, experiences, and backgrounds. We are Military Ready and Second Chance employers. Learn more about our hiring philosophy here.

Who We Are

Koch creates and innovates a wide spectrum of products and services that make life better. Our work spans a vast number of industries across the world, including engineered technology, refining, chemicals and polymers, pulp and paper, glass, electronics and many more. Headquartered in Wichita, Kansas, Koch employs about 120,000 employees across the globe.

At Koch, employees are empowered to do what they do best to make life better. Learn how our business philosophy helps employees unleash their potential while creating value for themselves and the company.

Our Benefits

Our goal is for each employee, and their families, to live fulfilling and healthy lives. We provide essential resources and support to build and maintain physical, financial, and emotional strength - focusing on overall wellbeing so you can focus on what matters most. Our benefits plan includes - medical, dental, vision, flexible spending and health savings accounts, life insurance, ADD, disability, retirement, paid vacation/time off, educational assistance, and may also include infertility assistance, paid parental leave and adoption assistance. Specific eligibility criteria is set by the applicable Summary Plan Description, policy or guideline and benefits may vary by geographic region. If you have questions on what benefits apply to you, please speak to your recruiter.

Additionally, everyone has individual work and personal needs. We seek to enable the best work environment that helps you and the business work together to produce superior results.

Equal Opportunities

Equal Opportunity Employer, including disability and protected veteran status. Except where prohibited by state law, some offers of employment are conditioned upon successfully passing a drug test. This employer uses E-Verify. Please click here for additional information. (For Illinois E-Verify information click here, aquí, or tu).

#LI-NK1

Apply now

Share

• Email
• Facebook
• X
• LinkedIn

Similar jobs

• Koch

Share

• Email
• Facebook
• X
• LinkedIn

Lead Cloud Identity Engineer

Location:

ZAPOPAN, Jalisco

Job Number:

188207

• Molex

Share

• Email
• Facebook
• X
• LinkedIn

Sr. Cloud Cybersecurity Architect

Location:

Lisle, Illinois

Job Number:

182776

• Koch

Share

• Email
• Facebook
• X
• LinkedIn

Analyst and DevOps Supervisor

Location:

Wichita, Kansas

Job Number:

188079

• GCH Technologies

Share

• Email
• Facebook
• X
• LinkedIn

GCH DevOps Prime

Location:

Atlanta, Georgia | Dallas, Texas | Orlando, Florida | Philadelphia, Pennsylvania | Washington, District of Columbia | Wichita, Kansas

Job Number:

186747

• Koch

Share

• Email
• Facebook
• X
• LinkedIn

IT Infrastructure Delivery Engineer

Location:

Bengaluru, Karnataka

Job Number:

185744

View all

Koch

Search Jobs Life at Koch Hiring Process Early Careers Military Events

2026 Koch IP Holdings, LLC. All Rights Reserved

Terms of Use Privacy Policy Code Of Conduct California Supply Vendors Right to Work Pay Transparency Policy Cookies Settings Help Equal Employment Opportunity Family Medical Leave Act Employee Polygraph Protection Act E-Verify Illinois E-Verify information click here, aquí, or tu

Privacy Preference Center

Privacy Preference Center

Your Privacy

Your Privacy

When you visit any web site, it may store or retrieve information on your browser, mostly in the form of cookies. This information might be about you, your preferences or your device and is mostly used to make the site work as you expect it to. The information does not usually directly identify you, but it can give you a more personalised web experience. Because we respect your right to privacy, you can choose not to allow some types of cookies. Click on the different category headings to find out more and change our default settings. However, blocking some types of cookies may impact your experience of the site and the services we are able to offer.

More information

• Strictly Necessary Cookies

Strictly Necessary Cookies

Always Active

Strictly Necessary Cookies

These cookies are necessary for the website to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms. You can set your browser to block or alert you about these cookies, but some parts of the site will not then work. These cookies do not store any personally identifiable information.

Cookie Details

• Performance Cookies

Performance Cookies

Performance Cookies

These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. They help us to know which pages are the most and least popular and see how visitors move around the site. All information these cookies collect is aggregated and therefore anonymous. If you do not allow these cookies we will not know when you have visited our site, and will not be able to monitor its performance.

Cookie Details

• Functional Cookies

Functional Cookies

Functional Cookies

These cookies enable the website to provide enhanced functionality and personalisation. They may be set by us or by third party providers whose services we have added to our pages. If you do not allow these cookies then some or all of these services may not function properly.

Cookie Details

• Targeting Cookies

Targeting Cookies

Targeting Cookies

These cookies may be set through our site by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant adverts on other sites. They do not store directly personal information, but are based on uniquely identifying your browser and internet device. If you do not allow these cookies, you will experience less targeted advertising.

Cookie Details

• Social Media Cookies

Social Media Cookies

Social Media Cookies

These cookies are set by a range of social media services that we have added to the site to enable you to share our content with your friends and networks. They are capable of tracking your browser across other sites and building up a profile of your interests. This may impact the content and messages you see on other websites you visit. If you do not allow these cookies you may not be able to use or see these sharing tools.

Cookie Details

Back Button

Advertising Cookies

Filter Button

Consent Leg.Interest

Select All Vendors

Select All Vendors

Select All Hosts

Select All

Clear Filters

Information storage and access

Apply

Confirm My Choices Reject All Allow All