Senior IAM Engineer

ADE ADESA Inc; Carmel (IN); Remote; USD 115,000 - 130,000; Full time

Benefits offered by this job

Medical benefits

Dental benefits

Vision benefits

401K RRSP

Job summary

OPENLANE is seeking a Senior Identity & Access Engineer to design, scale, and optimize our enterprise IAM and access governance. You will own complex IAM architecture projects, automate access lifecycles, and strengthen zero-trust controls across hybrid and cloud environments.

You will work with Cloud Engineering, IT Infrastructure, Compliance, and Security Architects to deliver secure, scalable identity solutions and drive audit readiness while mentoring junior engineers on IAM best practices.

Qualifications

• 5+ years of hands-on IAM/IT security engineering.
• Bachelor's degree in Computer Science, Cybersecurity or related field.
• Experience architecting enterprise SSO, MFA, and federated identities (SAML 2.0, OAuth 2.0, OpenID Connect).

Responsibilities

• Design, integration, and day-to-day IAM administration across multi-cloud environments.
• Develop and optimize automated provisioning/deprovisioning workflows and access lifecycles.
• Provide escalated Tier 3 support, root-cause analysis, and issue resolution.
• Assist with access certification reviews and compliance audit support.

Skills

IAM engineering

Zero-trust

SSO

MFA

RBAC/ABAC

IGA

Cloud identity

Scripting

IaC

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

Okta

Microsoft Entra ID

Ping Identity

Active Directory

LDAP

Job description

Who We Are:

At OPENLANE we make wholesale easy so our customers can be more successful. We're a technology company building the world's most advanced-and uncomplicated digital marketplace for used vehicles. We're a data company helping customers buy and sell smarter with clear, actionable insights they can understand and use. And we're an innovation company accelerating the future of wholesale remarketing through curiosity, collaboration, and an entrepreneurial spirit.

Our Values:

Driven Waybuilders. We pursue challenges that inspire us to build, create, and innovate. Relentless Curiosity. We seek to understand and improve our customers' experience. Smart Risk-taking. We transform risk into progress through data, experience, and intuition. Fearless Ownership. We deliver what we promise and learn along the way.

We're Looking For:

A Senior Identity & Access Engineer to design, scale, and optimize our enterprise identity infrastructure and access governance frameworks. In this role, you will take ownership of complex identity architecture projects, build seamless automation for access lifecycles, and strengthen our zero-trust security posture across hybrid and cloud environments.

You Are:

Comfortable using AI coding and productivity tools as part of your daily workflow to work faster and smarter. A proactive, analytical, and security-focused engineer who thrives on solving complex identity challenges. A collaborative team player with strong technical ownership and a commitment to continuous improvement. A clear communicator who can collaborate across technical teams and mentor junior engineers on IAM best practices.

You Bring:

Core knowledge of advanced identity lifecycles, enterprise governance, zero-trust principles, and least-privilege security architectures. Functional expertise in designing and optimizing single sign-on (SSO), multi-factor authentication (MFA), role-based/attribute-based access control (RBAC/ABAC), and identity governance and administration (IGA). Technical expertise in configuring and automating cloud identity providers (e.g., Okta, Microsoft Entra ID, Ping Identity), directory services (Active Directory, LDAP), scripting (Python, PowerShell, Bash), and Infrastructure as Code (IaC) tooling.

You Own:

Design, integration, and day-to-day administration of enterprise IAM, SSO, MFA, and Privileged Access Management (PAM) platforms. Development and optimization of automated provisioning/deprovisioning workflows, access request pipelines, and lifecycle operations. Escalated tier 3 support, root-cause analysis, and technical resolution for complex identity and authentication issues. Enterprise access certification reviews, compliance audit support, and identity risk assessment across multi-cloud environments.

You Drive:

Execution: Modernizing identity protocols, deploying scalable access policies, and automating manual identity lifecycle tasks using code and API integrations. Results: Enhanced infrastructure security, zero unauthorized access incidents due to legacy controls, streamlined user onboarding/offboarding, and audit readiness.

Who You Will Work With:

Reporting to the Identity & Access Management Manager, this role will collaborate with Cloud Engineering, IT Infrastructure, Compliance Officers, and Security Architects on a daily to weekly basis.

Where You Work:

Your work is performed as a Remote employee, with flexible support aligned to business needs.

Must Haves:

5+ years of hands-on experience in Identity and Access Management (IAM) or IT Security engineering. Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or equivalent practical experience. Demonstrated experience architecting and managing enterprise SSO, MFA, and federated identity protocols (SAML 2.0, OAuth 2.0, OpenID Connect). Advanced proficiency in directory service administration, scripting for workflow automation, and exposure to Infrastructure as Code (e.g., Terraform, CloudFormation). Demonstrated hands-on use of AI-assisted coding/development tools (e.g., AI coding assistants, LLM-based automation) to accelerate scripting, automation, or documentation work.

Nice to Haves:

Relevant certifications such as CISSP, Certified Identity and Access Manager (CIAM), or vendor credentials (e.g., Okta Certified Professional, Okta Certified Administrator, Google Professional Cloud Security Engineer, Google Professional Security Operations Engineer, AWS Certified Security - Specialty). Hands-on experience with Privileged Access Management (PAM) solutions. Experience designing identity security solutions for multi-cloud environments (AWS, Azure, Google Cloud).

What We Offer:

Competitive pay Medical, dental, and vision benefits with employer HSA contributions (US) and FSA options (US) Immediately vested 401K (US) or RRSP (Canada) with company match Paid Vacation, Personal, and Sick Time Paid maternity and paternity leave (US) Employer-paid short-term disability, long-term disability, life insurance, and AD&D (US) Robust Employee Assistance Program Employer paid Leap into Service Day to volunteer Tuition Reimbursement for eligible programs Opportunities to expand your skill set and share your knowledge across a publicly traded, global organization Company culture of internal promotions, diverse career paths, and meaningful advancement

Compensation Range of Annual Salary:

$115,000.00 - $130,000.00 USD (Depending on experience, skill set, qualifications, and other relevant factors.)

Company Overview:

OPENLANE makes wholesale easy so our customers can be more successful. Our end-to-end platform serves the remarketing needs of the world's largest OEMs, dealers, fleet operators, rental companies and financial institutions. We're a technology company delivering next generation tools to accelerate and simplify remarketing. We're an analytics company leveraging data to inform and empower our customers with clear, actionable insights. And we're an auction company powering the world's most advanced digital used vehicle marketplaces. In 2021, OPENLANE sold nearly 2.6 million vehicles valued at over $40 billion through our auctions and generated approximately $2.3 billion in revenue. Our integrated digital marketplaces and vehicle logistics centers reduce risk, improve transparency and streamline the experience for customers in about 75 countries. OPENLANE continues to make investments in innovation, strategic acquisitions and integrations to better serve our customers. Headquartered in Carmel, Indiana, OPENLANE has about 5,000 employees and maintains business units across North America, Europe, the Philippines and Uruguay. Together, the OPENLANE brands provide a complete remarketing solution for our customers. California Residents: Click here to learn more about the personal information we collect in the application process. Also, click here for how we adhere to the California Fair Chance Act. Canadian Residents: Click here to learn more about how we adhere to the provincial Human Rights Codes and any accessibility and/or disability legislation

Equal Opportunity Statement:

OPENLANE is an equal opportunity employer and a drug-free workplace.