Hybrid IAM Engineer: Entra ID, RBAC & Identity Security

Open Dealer Exchange

Southfield (MI)

Hybrid

USD 120,000 - 180,000

Full time

6 days ago

Be an early applicant

Application generator

Stand out for this role — generate a tailored resume and cover letter in about a minute.

Get past ATS filters

Benefits offered by this job

Hybrid work model

Job summary

Open Dealer Exchange is seeking a Cybersecurity Engineer in a hybrid role based in Southfield, MI. You will own the identity security posture, mature RBAC, and act as a trusted advisor across infrastructure, IT, and development teams.

Ideal candidates have deep Entra ID/Active Directory experience, governance expertise, and proficiency with automation using PowerShell or Graph APIs. The role offers a hybrid work model and competitive compensation.

Qualifications

5+ years of hands-on IAM engineering experience.
Deep knowledge of Entra ID (Azure AD) in enterprise environments.
Experience designing RBAC models at scale and governing access.
Experience with identity lifecycle automation and PIM governance.
Familiarity with OAuth/OIDC/SAML and federation patterns.
Automation experience using PowerShell or Graph API.

Responsibilities

Design and implement enterprise RBAC across Entra ID, AD, and Entra External ID.
Lead identity lifecycle automation and integrate HR systems for provisioning.
Define naming conventions, group structures, and access review cadences.
Govern non-human identities and enforce least privilege across environments.
Advise teams on token handling, session management, and federation patterns.
Drive Conditional Access and Privileged Identity Management configurations.
Govern External ID configurations and external identity federation.
Produce IAM documentation including runbooks and entitlement inventories.