Senior Identity Platform Engineer (Hybrid Cloud IAM)

AAATX AAA Texas LLC; Coppell (TX); On-site; USD 130,000 - 170,000; Full time

Benefits offered by this job

Health coverage

401(K) with company match

Tuition assistance

Floating holidays and PTO

Paid parental leave

Wellness programs

Employee discounts

Job summary

Auto Club Enterprises seeks a Senior Identity Engineer to design and implement enterprise identity solutions across on-prem, cloud, and hybrid environments. You will lead architecture decisions, mentor engineers, and ensure secure authentication, authorization, and workload identity across multi-site ecosystems.

You will work with Active Directory, Entra ID, and modern identity protocols, translating designs into code, automation, and resilient production deployments while maintaining

Qualifications

• Demonstrated experience designing and implementing enterprise identity solutions, not solely administering existing products.
• Deep knowledge of Active Directory in large multi-site or multi-forest environments, including authentication, Kerberos, trusts, directory dependencies, recovery considerations, and Windows and non-Windows interoperability.
• Strong experience with Entra ID, Entra Connect synchronization, hybrid identity, federation, conditional access concepts, and cloud identity integration.
• Strong knowledge of SAML, OAuth, OpenID Connect, LDAP, SCIM, MFA, PKI, RBAC, least privilege, secrets management, and privileged access patterns.
• Experience creating architecture diagrams, design records, integration patterns, failure‑mode analysis, recovery plans, implementation roadmaps, and operational handoff documentation.
• Working development and automation skills in Python or PowerShell, plus experience with APIs, Git, CI/CD, automated testing, and Infrastructure as Code or configuration management.

Responsibilities

• Design and engineer identity architectures for authentication, authorization, federation, identity lifecycle, governance, privileged access, secrets, MFA, directories, certificate services, and workload identity.
• Lead research, options analysis, proofs-of-concept, technical design, security review, and implementation planning for new identity products and capabilities.
• Engineer Active Directory and Entra ID solutions across multi-site, multi-forest, cloud, and hybrid environments, including Entra Connect synchronization and heterogeneous authentication.
• Design integrations using SAML 2.0, OAuth 2.0, OpenID Connect, LDAP, SCIM, Kerberos, API-based provisioning, certificates, and secure secrets patterns.
• Improve identity resilience through recovery architecture, threat detection, monitoring, failure‑mode analysis, disaster recovery, testing, and operational readiness.
• Engineer and integrate PKI, certificate lifecycle, HSM, MFA, PAM, secrets‑management, and federation‑agent technologies.
• Define patterns for non-human identity, workload identity, service principals, machine credentials, AI agents, MCP integrations, authorization, auditability, and governance.
• Partner with developers and automation engineers to translate designs into code, pipelines, Infrastructure as Code, automated tests, monitoring, and production deployments.
• Troubleshoot complex cross-platform identity issues through authentication-flow analysis, packet traces, logs, telemetry, and root‑cause analysis.
• Create reference architectures, segmentation diagrams, design decisions, standards, runbooks, recovery procedures, test evidence, and handover documentation.
• Mentor engineers, conduct design reviews, lead technical work across teams, and provide remote after-hours support during major outage conditions.

Skills

Active Directory

Entra ID

SAML/OAuth/OpenID Connect

PKI/MFA

Non-human/workload identities

Python/PowerShell

Git/CI/CD

IaC/Automation

Tools

PowerShell

Python

Git

CI/CD

IaC

Job description

Auto Club Enterprises seeks a Senior Identity Engineer to design and implement enterprise identity solutions across on-prem, cloud, and hybrid environments. You will lead architecture decisions, mentor engineers, and ensure secure authentication, authorization, and workload identity across multi-site ecosystems.

You will work with Active Directory, Entra ID, and modern identity protocols, translating designs into code, automation, and resilient production deployments while maintaining