Your Job We have an exciting opportunity to hire a Lead Cloud Identity Engineer to join our already skilled engineering team.
This individual will be a part of a global team that manages authentication and identity tools and procedures for Koch Industries.
Working closely with integral colleagues, as well as customers, will provide significant global exposure.
Our Team The Koch Technology Identity team provides modern Identity solutions and services for all Koch businesses.
We are responsible for the entire enterprise in designing innovative services, creating, and sharing best practices, and providing support for our services.
This role requires an in-office presence in our Zapopan office What You Will Do Set IAM architecture approve patterns, manage exceptions, and drive adoption.
Build authentication integrate ITDR-style monitoring, logging, alerting, SLOs, and rapid revocation.
Incident leadership: Act as escalation for auth outages, federation issues, and credential compromise; lead RCA and post-incident hardening.
Influence coach engineers through reviews, playbooks, and training.
Who You Are (Basic Qualifications) Extensive experience owning identity platforms at scale, with deep protocol-level expertise across SAML, OAuth2/OIDC, SCIM, FIDO2/passkeys, LDAP, and Kerberos.
Hands-on architecture across Azure Entra ID, AWS IAM,



or Google Cloud Identity, including cross-cloud federation and hybrid identity patterns.
Practical experience designing and building infrastructure across Azure, AWS, or GCP.
Strong coding skills in Python and/or TypeScript, with API integrations, Git, CI/CD, and automated testing.
Delivery of identity configuration as versioned, testable code using Terraform or similar technologies.
Hands-on experience integrating diverse applications with enterprise governance platforms; design and delivery of JML automation, RBAC/ABAC/PBAC models and access workflows integrating HRIS → IAM → downstream apps via SCIM and event-driven pipelines.
What Will Put You Ahead Experience building multi-step user journeys for Workforce, CIAM, and partner ecosystems using platforms such as PingOne DaVinci or Okta Workflows.
Hands-on development and design experience with SailPoint IdentityNow/IdentityIQ (or equivalent).
Real-time detection and response to identity-based threats, integrating signals from IdPs, directories, and SIEM/SOAR platforms.
Additionally, everyone has individual work and personal needs.
We seek to enable the best work environment that helps you and the business work together to produce superior results.

📌 Lead Cloud Identity Engineer (Zapopan)
🏢 Koch
📍 Zapopan