Analyst, Cloud Identity

McDonald's Corporation; Chicago (IL); On-site; USD 104,482 - 130,602; Full time

Benefits offered by this job

Health insurance

401(k) plan

Flexible work options

Education assistance

Job summary

McDonald’s Corporation is seeking a skilled Cloud Identity/ IAM Engineer to support day-to-day identity and access management across cloud platforms. You will collaborate with Product, Architecture, Engineering, and Security teams to implement identity solutions and automate processes.

The role requires 5+ years in identity or cloud security, experience with Azure AD, Okta, Ping, and AWS IAM, and strong knowledge of OAuth, SAML, and related standards.

Qualifications

• 5+ years of experience in identity, access management, or cloud security engineering.
• Deep understanding of cloud identity concepts including workforce identity, application identity, service principals, managed identities, and API security.
• Strong knowledge of authentication and authorization protocols and standards such as OAuth 2.0, OpenID Connect, SAML, SCIM, and LDAP.
• Experience designing and operating identity solutions using enterprise identity platforms (e.g., Entra ID/Azure AD, Okta, Ping, AWS IAM).
• Proficiency with modern software engineering practices, including CI/CD, infrastructure as code, automation, testing frameworks, and observability.
• Strong communication skills with the ability to articulate technical concepts to both technical and non-technical stakeholders.

Responsibilities

• Provide operational and implementation support for Cloud Identity, contributing to day-to-day IAM activities.
• Assist with configuration and maintenance of identity lifecycle processes such as user provisioning, deprovisioning, authentication, authorization, and access reviews across cloud and SaaS platforms.
• Support cloud identity integrations by participating in application onboarding, testing, documentation updates, and issue resolution for platforms such as Azure, AWS, and GCP.
• Work collaboratively with Product, Architecture, Engineering, and Security teams by gathering requirements, performing analysis, and helping execute approved identity solutions.
• Follow established security and engineering standards by implementing approved configurations, scripts, and automation tasks while adhering to documented best practices.
• Assist with identity-related automation efforts by executing scripts, validating outputs, and helping improve repeatable operational processes.
• Monitor cloud identity services using dashboards and alerting tools, documenting incidents, performing initial troubleshooting, and escalating issues according to defined procedures.
• Participate in reliability and resilience initiatives by supporting testing, data collection, and validation efforts for cloud identity platforms.
• Support enterprise initiatives such as application migrations, cloud onboarding, and digital transformation programs by executing identity-related tasks and validations as assigned.
• Collaborate with security, infrastructure, compliance, and risk teams to support audits, evidence gathering, access reviews, and policy alignment activities.

Skills

Cloud security

IAM

CI/CD

Communication

Education

Bachelor’s degree in Computer Science, Information Security, Engineering, or equivalent

Tools

Azure AD

Okta

Ping

AWS IAM

Job description

Company Description

McDonald’s growth strategy, Accelerating the Arches, encompasses all aspects of our business as the leading global omni-channel restaurant brand. As the consumer landscape shifts we are using our competitive advantages to further strengthen our brand. One of our core growth strategies is to Double Down on the 3Ds (Delivery, Digital and Drive Thru). McDonald’s will accelerate technology innovation so 65M+ customers a day will experience a fast, easy experience, whether at one of our 25,000 and growing Drive thurs, through McDelivery, dine-in or takeaway.

McDonald’s Global Technology is here to power tomorrow’s feel‑good moments.

That’s why you’ll find us at the forefront of transformative technology, exploring new and innovative ways to serve our millions of customers and spread happiness one delicious Hot Fudge Sundae‑dipped fry at a time. Using AI, robotics and emerging tech, we’re digitizing the Golden Arches. Combine that with our unparalleled global scale, and we’re reshaping all areas of the business, industry and every community that is home to a McDonald’s restaurant. We face complex tech challenges every day. But that’s where our diverse and talented teams come in. They’re made up of the best and brightest from all over the globe, and they thrive in the space where feel‑good meets fast‑paced.

Check out the McDonald’s Global Technology Technical Blog to learn how technology and our global team are directly enabling the Accelerating the Arches strategy.

Duties

• Provide operational and implementation support for Cloud Identity, contributing to day-to-day IAM activities.
• Assist with configuration and maintenance of identity lifecycle processes such as user provisioning, deprovisioning, authentication, authorization, and access reviews across cloud and SaaS platforms.
• Support cloud identity integrations by participating in application onboarding, testing, documentation updates, and issue resolution for platforms such as Azure, AWS, and GCP.
• Work collaboratively with Product, Architecture, Engineering, and Security teams by gathering requirements, performing analysis, and helping execute approved identity solutions.
• Follow established security and engineering standards by implementing approved configurations, scripts, and automation tasks while adhering to documented best practices.
• Assist with identity-related automation efforts by executing scripts, validating outputs, and helping improve repeatable operational processes.
• Monitor cloud identity services using dashboards and alerting tools, documenting incidents, performing initial troubleshooting, and escalating issues according to defined procedures.
• Participate in reliability and resilience initiatives by supporting testing, data collection, and validation efforts for cloud identity platforms.
• Support enterprise initiatives such as application migrations, cloud onboarding, and digital transformation programs by executing identity-related tasks and validations as assigned.
• Collaborate with security, infrastructure, compliance, and risk teams to support audits, evidence gathering, access reviews, and policy alignment activities.

Qualifications

• Demonstrated willingness and ability to live organizational values related to integrity, inclusion, collaboration, and accountability.
• 5+ years of experience in identity, access management, or cloud security engineering, with significant hands‑on experience in cloud platforms.
• Deep understanding of cloud identity concepts, including workforce identity, application identity, service principals, managed identities, and API security.
• Strong knowledge of authentication and authorization protocols and standards such as OAuth 2.0, OpenID Connect, SAML, SCIM, and LDAP.
• Experience designing and operating identity solutions using one or more enterprise identity platforms (e.g., Entra ID/Azure AD, Okta, Ping, AWS IAM).
• Proficiency with modern software engineering practices, including CI/CD, infrastructure as code, automation, testing frameworks, and observability.
• Strong communication skills with the ability to articulate technical concepts to both technical and non‑technical stakeholders.
• Bachelor’s degree in Computer Science, Information Security, Engineering, or equivalent practical experience.

Preferred Qualifications

• Hands‑on experience with multi‑cloud identity architectures and hybrid identity integrations.
• Knowledge of Zero Trust architectures and identity‑centric security models.
• Experience integrating identity platforms with SaaS applications and custom‑developed cloud‑native applications.
• Familiarity with compliance and regulatory requirements (e.g., SOX) as they relate to identity and access controls.

Compensation

Bonus Eligible: Yes

Long‑Term Incentive: Yes

Benefits Eligible: Yes

Salary Range

The expected salary range for this role is $104,482.00 – $130,602.00 per year. The above represents the expected salary range for this job requisition. Ultimately, in determining your pay, we may also consider your experience, and other job‑related factors.

Benefits & EEO Statement

Benefits eligible: This position offers health and welfare benefits, including but not limited to comprehensive health insurance, which includes medical, prescription drug, mental health, dental and vision coverage, as well as life insurance; a 401(k) plan; adoption assistance program; educational assistance program; flexible ways of working; and time off policies (including sick leave, parental leave, and vacation/PTO). McDonald’s is an equal opportunity employer committed to the diversity of our workforce. We promote an inclusive work environment that creates feel‑good moments for everyone. McDonald’s provides reasonable accommodations to qualified individuals with disabilities as part of the application or hiring process or to perform the essential functions of their job. If you need assistance accessing or reading this job posting or otherwise feel you need an accommodation during the application or hiring process, please contact [e-mail]. Reasonable accommodations will be determined on a case‑by‑case basis. McDonald’s provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to sex, sex stereotyping, pregnancy (including pregnancy, childbirth, and medical conditions related to pregnancy, childbirth, or breastfeeding), race, color, religion, ancestry or national origin, age, disability status, medical condition, marital status, sexual orientation, gender, gender identity, gender expression, transgender status, protected military or veteran status, citizenship status, genetic information, or any other characteristic protected by federal, state or local laws. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training. Nothing in this job posting or description should be construed as an offer or guarantee of employment.