Engineer, Identity and Access Management (IAM)

Clarios, LLC; Monterrey; Presencial; MXN 600.000 - 1.000.000; Jornada completa

Descripción de la vacante

Clarios is seeking an IAM Engineer to help design and build the enterprise identity experience from a technical perspective. You will help define the future-state strategy, architecture, and roadmap for end-user identity capabilities, ensuring secure, reliable access to necessary tools and information to deliver business outcomes.

The role emphasizes identity lifecycle design, access governance, self-service improvements, and secure-by-design principles.

Formación

• Five+ years of IAM engineering experience.
• Hands-on experience with Active Directory, Entra ID, and CyberArk.
• Strong background in identity lifecycle design and access governance.

Responsabilidades

• Define global IAM strategy and roadmap.
• Design scalable, secure identity solutions for end-user platforms and apps.
• Ensure authentication, authorization, and access controls meet security standards.
• Partner with Enterprise Architecture and Security to align with standards and regulatory requirements.
• Support transition to Run teams with clear ownership and governance.

Conocimientos

Active Directory

Entra ID

CyberArk

Saviynt

RBAC

ABAC

SSO

MFA

Zero Trust

Herramientas

Saviynt

Descripción del empleo

The Role

The Engineer, IAM is accountable for assisting with the planning, designing, and building of the enterprise digital employee and identity experience from a technical lens. You help define the future-state strategy, architecture, and roadmap for end-user and identity capabilities — ensuring the workforce can securely, reliably, and efficiently access the tools and information required to deliver business outcomes. The role centers on intentional design, engineering and technical results, and scalable solutions, working in close partnership with Security, Infrastructure, Applications, global functions and manufacturing, and business leaders. Success is measured by clarity of strategy, strength of design, technical skill, readiness for transition to Run teams, and alignment to Clarios values and enterprise priorities.

What You’ll Do (Impact Areas)

Strategy, vision & roadmap (Plan): help define the global strategy and future-state vision for identity services and capabilities aligned to Clarios business objectives, security posture, and growth plans — keeping strategies principled, risk-aware, and customer-centric while balancing productivity, security, compliance, and cost. Solution design & architecture (Build): design scalable, secure, user-centric solutions across identity domains; provide solid technical solutions, troubleshooting, and support for all IAM / Identity services; define standards and patterns that embed identity and access controls into end-user platforms, applications, and collaboration tools; partner with Enterprise Architecture and Security to align to architectural standards, security frameworks, and regulatory requirements; and make deliberate design trade-offs that reduce long-term risk and technical debt. Identity & access lifecycle enablement: design enterprise identity lifecycle models (joiner, mover, leaver) tightly integrated with HR processes and end-user access needs; define access governance, role design, and entitlement models that support least-privilege access while enabling business agility; and establish authentication and access design principles that deliver a seamless user experience without compromising security. End-user experience enablement: help define self-service, automation, and digital-experience improvements that simplify access and reduce friction for the workforce, ensuring solutions are globally scalable while allowing for regional and plant-specific requirements. Security, risk & compliance by design: embed security and compliance by design — not by exception — across all identity solutions; partner with Risk and Compliance teams to keep new capabilities audit-ready and aligned to enterprise control objectives; and proactively identify and mitigate identity-related risks through strong upfront design and governance. Transition readiness & governance: ensure all solutions are fully designed, documented, and ready for transition into Run organizations with clear ownership, controls, and success criteria, and establish design governance, decision frameworks, and success measures for consistent execution and accountability. Leadership & influence: influence enterprise direction through strong partnership, clear communication, and fact-based recommendations, and model Clarios values by fostering collaboration, accountability, and a high-performing team culture.

What Success Looks Like

Well-architected solutions that transition smoothly into Run with minimal rework. Reduced long-term risk through intentional, identity-centric design. Strong trust from business, security, and IT partners.

Core Competencies

Deep IAM / Identity engineering across Active Directory, Entra ID, and CyberArk (Saviynt a plus). Identity lifecycle design (joiner / mover / leaver) and access governance (RBAC / ABAC, least privilege, zero trust). Authentication and authorization design: SSO, MFA, SCIM, PAM, PKI, identity federation, and directory synchronization. Secure-by-design thinking across risk, compliance, and audit-readiness. Digital workplace architecture and scalable, user-centric solution design. Partnership, clear communication, and fact-based influence across enterprise stakeholders.

What You Bring (Qualifications)

Required Minimum of five (5) years of experience engineering IAM and Identity Services. Strong, hands‑on technical capabilities within Identity services — Active Directory, Entra ID, CyberArk (Saviynt is a plus). Strong background in digital workplace architecture, identity lifecycle design, and access governance. Identity lifecycle management (joiner / mover / leaver processes). Technical understanding of authentication vs. authorization models. Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC). Least-privilege and zero-trust access principles, plus identity federation and directory synchronization. SSO, MFA, SCIM, PAM, PKI, scripting, and technical SME / troubleshooting capabilities. Experience with innovative IAM solutions such as passwordless, token, and card authentication within manufacturing environments.

About Clarios

Clarios is the global leader in advanced, low-voltage battery technologies for mobility. Our batteries and smart solutions power nearly every type of vehicle and are found in 1 of 3 cars on the road today. With around 18,000 employees in over 100 countries, we bring deep expertise to our Aftermarket and OEM partners, and reliability, safety and comfort to everyday lives. We answer to the planet with a rigorous sustainability focus – advancing best-in-class sustainability practices and advocating for them across our industry. We work to ensure 100% of our products sold are recyclable, and we recycle 8,000 batteries an hour in our network. You can find more information here (PDF). Clarios is the creator behind the world’s most recognizable car battery brands. We are the car battery found in most new vehicles including leading brands such as Ford, General Motors, Toyota, Honda, and Nissan. Our 16,000 employees develop, manufacture, and distribute batteries for virtually every type of vehicle. We recover, recycle, and reuse up to 99% of our battery materials, leading sustainability practices in our industry.

Equal Employment Opportunity

Clarios, LLC is an equal employment opportunity and affirmative action employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, protected veteran status, status as a qualified individual with a disability, or any other characteristic protected by law. For more information, please view EEO is the Law, EEO is the Law (supplement), and Pay Transparency Non-discrimination. If you are an individual with a disability and you require an accommodation during the application process, please email [e-mail].