Senior IAM Engineer — RBAC & Entra ID Architect

Open Dealer Exchange; Southfield (MI); Hybrid; USD 150,000 - 190,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

Open Dealer Exchange in Southfield, MI is seeking a Senior Cybersecurity Engineer (IAM) to own and mature identity security across a multi‑platform environment. You will drive an RBAC program and act as a trusted advisor to infrastructure, IT, and development teams.

The ideal candidate brings deep Entra ID (Azure AD) and Active Directory expertise, strong identity lifecycle automation skills, and experience with governance, PIM, and token handling.

Qualifications

• 5+ years of hands-on IAM engineering experience, with at least 3 years on Entra ID (Azure AD) in enterprise environments.
• Deep working knowledge of Active Directory, including group policy, OU design, domain trust models, and hybrid identity patterns.
• Demonstrated experience designing and implementing RBAC models at scale in complex or legacy environments.
• Hands-on experience with Entra ID Governance, including access reviews, entitlement management, lifecycle workflows, and Privileged Identity Management (PIM).
• Strong working knowledge of OAuth 2.0, OIDC, and SAML, sufficient to review developer implementations and identify security risk.
• Practical experience automating identity lifecycle events using Logic Apps, Azure Functions, PowerShell, or the Microsoft Graph API.
• Ability to communicate risk clearly to non-technical stakeholders and produce compliance-ready documentation.
• Will accept any suitable combination of education, training, or experience.

Responsibilities

• Design and implement enterprise RBAC across Entra ID, Active Directory, and Entra External ID.
• Lead identity lifecycle automation: integrate HR with Entra ID to automate provisioning/deprovisioning.
• Govern directory structure and access hygiene: define naming conventions, group structures, and review cadences.
• Manage non-human identities: govern service accounts and app registrations with least privilege.
• Advise development teams on identity security: provide guidance on token handling, session management, and federation.
• Drive Conditional Access and PIM: design policies and manage privileged admin access across Azure/M365.
• Support Entra External ID governance: advise on tenant configuration, policies, user flows, and federation.
• Produce compliance-ready documentation: maintain IAM docs and audit inventories for regulations.

Skills

IAM engineering

Entra ID

Active Directory

RBAC design

OAuth2 / OIDC / SAML

Identity lifecycle automation

PowerShell / Graph API

Security risk communication

Education

Bachelor's degree in CS/IS or equivalent

Tools

Logic Apps

Azure Functions

Microsoft Graph API

SCIM

HRIS integration tools

Job description

Open Dealer Exchange in Southfield, MI is seeking a Senior Cybersecurity Engineer (IAM) to own and mature identity security across a multi‑platform environment. You will drive an RBAC program and act as a trusted advisor to infrastructure, IT, and development teams.

The ideal candidate brings deep Entra ID (Azure AD) and Active Directory expertise, strong identity lifecycle automation skills, and experience with governance, PIM, and token handling.