Identity & Access Architect - Zero Trust & Automation

AAA Auto Club Enterprises; Costa Mesa (CA); On-site; USD 110,000 - 146,000; Full time

Benefits offered by this job

Health coverage

401(K) + Pension

Tuition assistance

Floating holidays and PTO

Paid parental leave

Wellness programs

Employee discounts

Job summary

Auto Club Enterprises in Costa Mesa is seeking an Identity Engineer to design, implement, automate, and support enterprise identity platforms that enable secure access to critical business applications and infrastructure.

You will collaborate with Cybersecurity, Infrastructure, Cloud Engineering, App Development, and Architecture teams to advance an identity-first security strategy and support a modern Zero Trust environment.

Qualifications

• Experience with identity and access management concepts and governance.
• Hands-on with authentication, authorization, federation, lifecycle management and governance.
• Experience with LDAP, Active Directory, Entra ID, SAML, OAuth, OIDC and related tech.
• RBAC design, entitlement management, role engineering and access provisioning.
• Automation scripting using PowerShell or Python.

Responsibilities

• Design, engineer, and support IAM solutions including authentication, authorization, and governance.
• Develop automation to improve efficiency and strengthen security controls.
• Integrate with SAML, OAuth, OpenID Connect, LDAP, and SCIM.
• Support directory services, cloud identity platforms, and hybrid identities.
• Collaborate with cybersecurity and infrastructure teams to align with Zero Trust.

Skills

IAM concepts

RBAC design

Automation scripting

Cloud security

Zero Trust concepts

Tools

Active Directory

Entra ID / Azure AD

SAML

OAuth / OpenID Connect

Ansible / Terraform

PKI / certificate lifecycle

Job description

Auto Club Enterprises in Costa Mesa is seeking an Identity Engineer to design, implement, automate, and support enterprise identity platforms that enable secure access to critical business applications and infrastructure.

You will collaborate with Cybersecurity, Infrastructure, Cloud Engineering, App Development, and Architecture teams to advance an identity-first security strategy and support a modern Zero Trust environment.