Identity Architect II: Enterprise IAM & PKI Leader

AAA; Coppell (TX); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

Health coverage

401(k) with company match

Tuition assistance

Floating holidays/PTO

Parental leave

Wellness programs

Employee discounts

Job summary

Auto Club Enterprises is hiring an Identity Engineer II to design, implement, and support enterprise identity solutions across on-premises, cloud, and hybrid environments. You will lead architecture decisions, mentor engineers, and ensure secure identity capabilities for workforce, non-human, workload, and AI identities.

The role emphasizes deep AD and Entra ID expertise, hands-on engineering, and collaboration with Architecture, Cybersecurity, and Cloud teams to deliver scalable identity

Qualifications

• Demonstrated experience designing and implementing enterprise identity solutions, not solely administering existing products.
• Deep knowledge of Active Directory in large multi-site or multi-forest environments, including authentication, Kerberos, trusts, directory dependencies, recovery considerations, and Windows and non-Windows interoperability.
• Strong experience with Entra ID, Entra Connect synchronization, hybrid identity, federation, conditional access concepts, and cloud identity integration.
• Strong knowledge of SAML, OAuth, OpenID Connect, LDAP, SCIM, MFA, PKI, RBAC, least privilege, secrets management, and privileged access patterns.
• Experience creating architecture diagrams, design records, integration patterns, failure-mode analysis, recovery plans, implementation roadmaps, and operational handoff documentation.
• Working development and automation skills in Python or PowerShell, plus experience with APIs, Git, CI/CD, automated testing, and Infrastructure as Code or configuration management.
• Experience engineering highly available, fault-tolerant, monitored, and recoverable enterprise services.
• Ability to independently research an unfamiliar technology, build or guide a proof-of-concept, assess security and business tradeoffs, and recommend a scalable approach.
• Advanced troubleshooting skills using logs, telemetry, protocol traces, packet analysis, and cross-platform dependency mapping.
• Excellent communication and the ability to lead technical decisions and implementation across Architecture, Cybersecurity, Infrastructure, Cloud, Application Development, and business teams.

Responsibilities

• Design and engineer identity architectures for authentication, authorization, federation, identity lifecycle, governance, privileged access, secrets, MFA, directories, certificate services, and workload identity.
• Lead research, options analysis, proofs-of-concept, technical design, security review, and implementation planning for new identity products and capabilities.
• Engineer Active Directory and Entra ID solutions across multi-site, multi-forest, cloud, and hybrid environments, including Entra Connect synchronization and heterogeneous authentication.
• Design integrations using SAML 2.0, OAuth 2.0, OpenID Connect, LDAP, SCIM, Kerberos, API-based provisioning, certificates, and secure secrets patterns.
• Improve identity resilience through recovery architecture, threat detection, monitoring, failure-mode analysis, disaster recovery, testing, and operational readiness.
• Engineer and integrate PKI, certificate lifecycle, HSM, MFA, PAM, secrets-management, and federation-agent technologies.
• Define patterns for non-human identity, workload identity, service principals, machine credentials, AI agents, MCP integrations, authorization, auditability, and governance.
• Partner with developers and automation engineers to translate designs into code, pipelines, Infrastructure as Code, automated tests, monitoring, and production deployments.
• Troubleshoot complex cross-platform identity issues through authentication-flow analysis, packet traces, logs, telemetry, and root-cause analysis.
• Create reference architectures, segmentation diagrams, design decisions, standards, runbooks, recovery procedures, test evidence, and handover documentation.
• Mentor engineers, conduct design reviews, lead technical work across teams, and provide remote after-hours support during major outage conditions.

Skills

Identity architecture

Platform engineering

Active Directory

Entra ID

Hybrid identity

SAML

OAuth

OpenID Connect

PKI

Secrets management

Git

Entra Connect

CI/CD

Python

PowerShell

Tools

Entra Connect

Git

Job description

Auto Club Enterprises is hiring an Identity Engineer II to design, implement, and support enterprise identity solutions across on-premises, cloud, and hybrid environments. You will lead architecture decisions, mentor engineers, and ensure secure identity capabilities for workforce, non-human, workload, and AI identities.

The role emphasizes deep AD and Entra ID expertise, hands-on engineering, and collaboration with Architecture, Cybersecurity, and Cloud teams to deliver scalable identity