Sr Platform/Identity Engineer

MMD Services; Elmhurst (IL); On-site; USD 110,000 - 140,000; Full time

Job summary

MMD Services Inc. is seeking a Sr IAM Engineer to lead identity security across cloud and CI/CD environments. The role emphasizes hands-on engineering, SSO/MFA rollout, and privileged access management to advance security posture.

The position values collaboration and requires three days on-site in Elmhurst, IL, just outside Chicago, with room to grow platform capabilities over time.

Qualifications

• 5+ years engineering experience with identity as core part of the job.
• Hands-on with Entra ID, AD, Okta, identity governance, or RBAC tooling.
• Understanding of just-in-time provisioning and zero standing privilege concepts.
• Ability to pick up new technologies and drive implementations independently.
• Engineering mindset; builds and implements rather than policies.
• Strong communication across technical and non-technical audiences.

Responsibilities

• Own identity initiatives: SSO, MFA rollout, account lifecycle and provisioning.
• Harden and modernize Active Directory and cloud identity platforms.
• Improve onboarding/offboarding for access control.
• Design least-privilege access patterns with just-in-time elevation.
• Onboard applications to identity platform against roadmap.
• Evaluate and select identity tooling for long-term strategy.
• Support privileged access and secrets management platforms.
• Contribute to cloud security and CI/CD security work.
• Automate repeatable tasks via scripting.
• Collaborate with internal teams and vendors; communicate risks early.
• Tackle unfamiliar tech and drive work without waiting for direction.

Skills

Identity engineering

Entra ID/Active Directory

Okta

RBAC provisioning

Cloud security

CI/CD security

Privileged access management

Python/PowerShell

Tools

Entra ID

Active Directory

Okta

CyberArk

Delinea

BeyondTrust

Job description

Our client, a Chicago-staple in the collision and auto body industry, is looking to hire a Sr IAM Engineer. The focus of this position combines cloud security, CI/CD security practices, privileged access and security automation!

Please note! We place high value on collaboration and the value that in‑person work offers. We need someone who can commit to three days onsite in Elmhurst, just outside Chicago!

About the Company

We’re looking for a Security Platform Engineer to strengthen and modernize identity security across an enterprise environment. This is a hands-on engineering role, not a governance seat. It suits someone who knows what good identity looks like, where the industry is headed, and how to move work forward without much direction. The broader platform spans cloud security and CI/CD security, with room to take on more scope over time.

Responsibilities

• Own execution of identity initiatives, including SSO and MFA rollout, account lifecycle and provisioning, and role‑based access.
• Harden and modernize Active Directory alongside cloud identity platforms.
• Improve onboarding and offboarding processes so access is granted, changed, and removed the way it should be.
• Design access patterns around least privilege and just‑in‑time elevation, and put guardrails in place to keep them enforced.
• Continue onboarding applications to the identity platform against an established roadmap.
• Help evaluate and select identity tooling as the longer‑term platform strategy takes shape.
• Support privileged access and secrets management platforms as part of the broader identity picture.
• Contribute to cloud security and CI/CD security work as the platform evolves.
• Automate repeatable work through scripting.
• Partner with internal teams and outside vendors, and communicate progress, dependencies, and risks clearly and early.
• Pick up unfamiliar technologies, figure out what needs to happen, and drive the work through without waiting to be told.

Experience

• At least 5 years of engineering experience with identity as a core part of the job, whether in security, infrastructure, or platform roles.
• Hands‑on depth with some mix of Entra ID, Active Directory, Okta, identity governance, or account provisioning and RBAC tooling. Depth and judgment matter more here than any one product.
• A working sense of where identity is going, including concepts like just‑in‑time provisioning and zero standing privilege, and the ability to tell a strong implementation from one that only looks good on paper.
• A track record of picking up new technologies and driving them forward on your own.
• An engineering mindset. This role builds and implements rather than writing policy for others to execute.
• Strong communication skills across technical and non‑technical audiences.
• Cloud security experience (AWS or Azure) is a strong plus.
• Experience securing CI/CD pipelines is a plus.
• Privileged access management experience (CyberArk, Delinea, BeyondTrust, or similar) is a plus, whether as a platform owner or a heavy end user.
• Coding or scripting skills (Python, PowerShell, or similar) are a plus. If you’ve learned one language, you can pick up another.

MMD Services Inc. is an equal opportunity employer. All applicants are considered for all positions without regard to race, religion, color, sex, gender, sexual orientation, pregnancy, age, national origin, ancestry, physical/mental disability, medical condition, military/veteran status, genetic information, marital status, ethnicity, alienage, or any other protected classification, in accordance with applicable federal, state, and local laws.