Identity Engineer: Zero Trust & PAM Automation

ACSC Auto Club Of Southern Calif; United States; On-site; USD 110,000 - 146,000; Full time

Benefits offered by this job

Health coverage

401(K) saving plans with company match

Tuition assistance

Paid parental leave

Wellness programs

Employee discounts

Job summary

Auto Club Enterprises is seeking an Identity Engineer to design, implement, automate, and support enterprise identity platforms across on‑prem, cloud, and hybrid environments. You will advance zero trust with strong access governance and automation, partnering with Cybersecurity, Infra, and Cloud teams.

You will drive IAM strategy, implement MFA, PKI, and PAM solutions, and contribute to scalable, secure business outcomes for ACE members and employees.

Qualifications

• Experience in large, complex technology environments addressing identity and security challenges.
• Strong understanding of IAM concepts including authentication, authorization, federation, lifecycle, and governance.
• Hands-on with LDAP/Active Directory/Entra ID, SAML, OAuth, OpenID Connect.
• Experience designing RBAC, entitlement management, role engineering and access provisioning.
• Automation/scripting with PowerShell or Python.

Responsibilities

• Design, engineer, and support enterprise identity and access management solutions.
• Develop automation solutions to improve efficiency and security controls.
• Implement identity integrations using SAML, OAuth, OpenID Connect, LDAP, and SCIM.
• Support directory services, cloud identity platforms, and hybrid identity architectures.
• Design and manage PKI, MFA, certificate services, and PAM technologies.
• Collaborate with cybersecurity teams to strengthen access controls and meet regulatory requirements.

Skills

Identity & Access Management

RBAC & governance

PowerShell / Python

Cloud platforms (Azure/AWS)

Automation & IaC

PKI & MFA

Zero Trust

SAML / OAuth / OIDC

PAM (CyberArk)

CI/CD / DevOps

Education

Tools

Ansible

Terraform

Azure AD

SAML tooling

Job description

Auto Club Enterprises is seeking an Identity Engineer to design, implement, automate, and support enterprise identity platforms across on‑prem, cloud, and hybrid environments. You will advance zero trust with strong access governance and automation, partnering with Cybersecurity, Infra, and Cloud teams.

You will drive IAM strategy, implement MFA, PKI, and PAM solutions, and contribute to scalable, secure business outcomes for ACE members and employees.