Sr IAM Engineer

About the Company

Our client, a Chicago-staple in the collision and auto body industry, is looking to hire a Sr IAM Engineer. The focus of this position combines cloud security, CI/CD security practices, privileged access and security automation!

Please note! We place high value on collaboration and the value that in-person work offers. We need someone who can commit to three days onsite in Elmhurst, just outside Chicago!

About the Company

We’re looking for a Security Platform Engineer to strengthen and modernize identity security across an enterprise environment. This is a hands-on engineering role, not a governance seat. It suits someone who knows what good identity looks like, where the industry is headed, and how to move work forward without much direction. The broader platform spans cloud security and CI/CD security, with room to take on more scope over time.

Responsibilities

• Own execution of identity initiatives, including SSO and MFA rollout, account lifecycle and provisioning, and role-based access.
• Harden and modernize Active Directory alongside cloud identity platforms.
• Improve onboarding and offboarding processes so access is granted, changed, and removed the way it should be.
• Design access patterns around least privilege and just-in-time elevation, and put guardrails in place to keep them enforced.
• Continue onboarding applications to the identity platform against an established roadmap.
• Help evaluate and select identity tooling as the longer-term platform strategy takes shape.
• Support privileged access and secrets management platforms as part of the broader identity picture.
• Contribute to cloud security and CI/CD security work as the platform evolves.
• Automate repeatable work through scripting.
• Partner with internal teams and outside vendors, and communicate progress, dependencies, and risks clearly and early.
• Pick up unfamiliar technologies, figure out what needs to happen, and drive the work through without waiting to be told.

Experience

• At least 5 years of engineering experience with identity as a core part of the job, whether in security, infrastructure, or platform roles.
• Hands-on depth with some mix of Entra ID, Active Directory, Okta, identity governance, or account provisioning and RBAC tooling. Depth and judgment matter more here than any one product.
• A working sense of where identity is going, including concepts like just-in-time provisioning and zero standing privilege, and the ability to tell a strong implementation from one that only looks good on paper.
• A track record of picking up new technologies and driving them forward on your own.
• An engineering mindset. This role builds and implements rather than writing policy for others to execute.
• Strong communication skills across technical and non-technical audiences.
• Cloud security experience (AWS or Azure) is a strong plus.
• Experience securing CI/CD pipelines is a plus.
• Privileged access management experience (CyberArk, Delinea, BeyondTrust, or similar) is a plus, whether as a platform owner or a heavy end user.
• Coding or scripting skills (Python, PowerShell, or similar) are a plus. If you’ve learned one language, you can pick up another.

MMD Services Inc. is an equal opportunity employer. All applicants are considered for all positions without regard to race, religion, color, sex, gender, sexual orientation, pregnancy, age, national origin, ancestry, physical/mental disability, medical condition, military/veteran status, genetic information, marital status, ethnicity, alienage, or any other protected classification, in accordance with applicable federal, state, and local laws.