Identity & Access Management Engineer

Michigan Farm Bureau Family of Companies; Lansing (MI); Hybrid; USD 90,000 - 140,000; Full time

Benefits offered by this job

Medical, dental, vision benefits

401K

Hybrid work arrangement in Michigan

Job summary

Michigan Farm Bureau Family of Companies seeks an IAM Lead to design, implement, and maintain secure identity and access solutions. You will lead authentication, authorization, and access governance across the organization while aligning with security best practices and regulatory requirements.

You will administer identities, support joiner/mover/leaver workflows, and collaborate with IT teams and business stakeholders to reduce risk and ensure compliant access.

Qualifications

• Bachelor's degree or equivalent experience required.
• 3–5 years IAM, security engineering, or related role.
• Experience with Microsoft Entra ID, SSO, MFA, CA, and identity governance.
• Experience with Windows environments, AD, GP, and PowerShell.
• Knowledge of Zero Trust and least-privilege access concepts.
• Strong communication across all levels and regulatory/compliance support.

Responsibilities

• Design, implement, and maintain secure, scalable IAM solutions.
• Administer and secure user identities and joiner/mover/leaver workflows.
• Collaborate with application owners and IT teams to ensure secure access and compliance.
• Maintain documentation, IAM standards, and improve workflows.
• Provide guidance and support to the team on IAM topics.

Skills

IAM expertise

Security engineering

Azure AD / Entra ID

SSO / MFA / CA

Least-privilege access

PowerShell

Zero Trust

Communication

Audit/compliance

Education

Bachelor's degree in computer science or related field

Tools

SIEM

eDiscovery

Active Directory

Group Policy

Job description

To be responsible for designing, implementing, and maintaining secure, scalable identity and access solutions that protect the organizations systems and data while enabling efficient and compliant access for users. This role serves as a technical lead for IAM, ensuring authentication, authorization, and access governance aligning with security best practices, regulatory requirements, and business needs.

Administer and secure user identities across the Family of Companies by supporting day-to-day identity and access management operations, automated joiner/mover/leaver workflows, troubleshooting complex access issues and support team members through knowledge sharing and guidance.

Design, implement, and maintain secure, scalable IAM solutions, processes, and standards that improve operational efficiency, enforce least-privilege access, and reduce identity-related risk.

Maintain in-depth knowledge of identity usage within all company systems, accurate documentation, operational procedures, IAM standards, and continually assess and improve workflows to align with business needs and security best practices.

Collaborate with application owners, business stakeholders and IT teams to ensure secure access, improve identity security, reduce risk, and support compliance with regulatory and organizational requirements.

Required

• Bachelor's degree in computer science or related field required, or equivalent experience may be considered.
• Minimum of three to five years of experience in Identity and Access Management (IAM), Security Engineering, or a related information security role required.
• Diverse data processing experience in a large multi-server wide area network environment utilizing Microsoft Windows workstations required.
• Hands-on experience using security systems and identity platforms, including Microsoft Entra ID (Azure AD), Single Sign-On (SSO), federated identity, Multi-Factor Authentication (MFA), and Conditional Access, Log management, SIEM, Content Filtering, Data Loss Prevention, eDiscovery and In-Place Hold.
• Experience implementing role-based access control, privileged access models (PIM/PAM), and joiner/mover/leaver workflows.
• Experience with Microsoft products and security best practices for their use, especially with Active Directory, Group Policy Objects, and PowerShell/GUI administration tools required.
• Knowledge of Zero Trust principles, least-privilege access models and IAM governance best practices.
• Ability to communicate well with all levels of the organization including end users, technical personnel, and management required.
• Experience supporting audit, compliance, or regulatory requirements related to identity and access controls.

Note: This is a Hybrid position working both remotely from the State of Michigan and Onsite in the Farm Bureau Home Office located in Lansing, Michigan (when it is required). Candidates may also work Onsite if they prefer that environment.

• Farm Bureau offers a full benefit package including medical, dental, vision, and 401K.