IAM Engineer: Entra ID, RBAC & Secure Access

Open Dealer Exchange; Southfield (MI); Hybrid; USD 120,000 - 150,000; Full time

Benefits offered by this job

Hybrid work model

Competitive compensation package

Job summary

Open Dealer Exchange is seeking an Identity and Access Management Engineer to mature our RBAC program and govern access across Entra ID, Active Directory, and external identities. You will automate lifecycle events, define naming and group structures, and advise on token handling and federation patterns.

The role emphasizes governance, compliance documentation, and collaboration with security engineers to strengthen our enterprise identity posture in a hybrid environment.

Qualifications

• 5+ years IAM engineering experience with at least 3 years on Entra ID in enterprise environments.
• Deep AD knowledge including group policy, OU design, domain trust, and hybrid identity.
• Experience designing scalable RBAC models in complex or legacy environments.
• Hands-on Entra ID Governance: access reviews, entitlement management, lifecycle workflows, PIM.
• Strong knowledge of OAuth 2.0, OIDC, and SAML for secure integrations.
• Experience automating identity lifecycle events using Logic Apps, Azure Functions, PowerShell, or Graph API.
• Ability to communicate risk to non-technical stakeholders and produce compliance-ready docs.

Responsibilities

• Design and implement enterprise RBAC across Entra ID, AD, and Entra External ID.
• Lead identity lifecycle automation from HR system to provisioning/deprovisioning.
• Govern directory structure, naming conventions, and access review cadences.
• Govern service accounts and app registrations with least-privilege controls.
• Advise development teams on token handling, sessions, and federation patterns.
• Design and own Conditional Access and Privileged Identity Management.
• Support External ID governance, tenant config, policies, and user flows.
• Produce audit-ready entitlement inventories and runbooks.

Skills

IAM engineering

Entra ID (Azure AD)

Active Directory

RBAC design

Identity lifecycle automation

OAuth 2.0 / OIDC / SAML

PowerShell / Graph API

Governance & compliance

3+ years Entra ID Governance

Education

Bachelor's degree in CS or related field

Tools

Logic Apps

Azure Functions

Microsoft Graph API

Job description

Open Dealer Exchange is seeking an Identity and Access Management Engineer to mature our RBAC program and govern access across Entra ID, Active Directory, and external identities. You will automate lifecycle events, define naming and group structures, and advise on token handling and federation patterns.

The role emphasizes governance, compliance documentation, and collaboration with security engineers to strengthen our enterprise identity posture in a hybrid environment.