Identity Security Engineer

Location: Detroit, MI

Rate : open for right Candidate .

Visa: Citizens

 
Key Responsibilities

• IAM Governance & Oversight
• Lead scheduled and ad-hoc access reviews for human and non-human identities, applications, groups, cloud resources, and privileged accounts.
• Create, maintain and enforce IAM governance standards, policies, and procedures.
• Monitor identity controls for audit support and compliance with internal and external frameworks.
• Drive remediation efforts for access control gaps.
• Role-Based Access Control (RBAC) & Lifecycle Management
• Design and refine RBAC models, access tiers, and least-privilege principles with internal stakeholders.
• Work with application owners to map permissions and standardize access roles.
• Support user lifecycle processes (Joiner/Mover/Leaver) and automated provisioning workflows where available.
• IAM Tool Ownership & Administration
• Serve as primary owner/admin for one or more IAM platforms.
• Manage configuration, integrations, workflows, and system health.
• Coordinate enhancements, upgrades, and platform improvements.
• Partner with application teams to onboard new systems into the IAM ecosystem.
• Document entitlements, define provisioning rules, and ensure consistent access patterns.
• Engineering & Cloud Infrastructure Support
• Lead MFA/Passkey implementation and support SSO integrations and ensure alignment with security requirements.
• Security Operations Support
• Review and approve access requests for elevated or sensitive roles.
• Help investigate access-related security incidents and identity threats.
• Provide security guidance to internal teams for identity best practices.
  
  

Required Knowledge, Skills And Abilities

• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or equivalent experience will be considered in lieu of formal degree.
• 8 years'' experience in cybersecurity, IT, or similar discipline, with at least 2 years of hands-on identity security experience.
• Hands-on experience with one or more IAM/IAG platforms.
• Working knowledge of access governance, RBAC, provisioning, and directory services.
• Understanding of SSO/MFA technologies, SAML/OIDC/OAuth protocols.
• Familiarity with compliance frameworks: NIST, SOX, ISO 27001, PCI.
  
  
  

Preferred Knowledge, Skills And Abilities

• Certifications such as: CISSP, CCSP, Security+, etc., highly preferred.
• Experience onboarding applications into IAM platforms.
• Prior ownership of an IAM tool or identity governance program.
• Participation in IAM modernization projects or cloud migration initiatives.
• Demonstrated success implementing RBAC models or conducting large-scale access reviews.
• Hands-on knowledge of PAM, secrets management, or identity threat detection.
• Portfolio examples (RBAC matrix, IAM workflows, automation scripts, etc.).