IAM Security Engineer

BorgWarner•Auburn Hills, MI

About The Position

The IAM Security Engineer designs, implements, and maintains systems that ensure authorized users have appropriate access to enterprise resources. The role leads access reviews, improves role-based access control (RBAC) models, optimizes IAM platforms, and partners with teams across the business to promote secure identity practices. It bridges security architecture with daily IT operations and development. The engineer oversees IAM governance and access reviews for human and non-human identities, applications, groups, cloud resources, and privileged accounts; establishes and enforces IAM standards; supports audit and compliance activities; and drives remediation of access-control gaps. The role also designs RBAC models and lifecycle processes, manages Active Directory and Entra identities and groups, supports migrations during acquisitions and divestitures, and automates access and provisioning processes. As an IAM platform owner and administrator, the engineer manages platform configuration, integrations, workflows, enhancements, and system onboarding. The position supports MFA/passkey and SSO implementations, creates SSO applications in Entra, deploys and manages Active Directory domain controllers and DNS servers, manages certificates, and automates digital certification processes. It also reviews sensitive access requests, assists with identity-related incident investigations, and provides guidance on identity security practices.

Requirements

Bachelor’s degree in cybersecurity, computer science, computer engineering, or a related field; equivalent professional experience may be considered instead.
3–5 years of experience in cybersecurity, IT, or a similar discipline, including at least 2 years of hands-on identity security experience.
At least 3 years of hands-on experience administering Active Directory, with a strong understanding of its core components and services.
Hands-on experience with one or more IAM/IAG platforms.
Working knowledge of access governance, RBAC, provisioning, and directory services.
Experience onboarding applications into IAM platforms.
Understanding of SSO/MFA technologies and SAML, OIDC, and OAuth protocols.
Familiarity with compliance frameworks such as NIST, TISAX, SOX, and ISO 27001.
Experience setting up a new domain from start to finish.
Experience working with DNS and common DNS record types.
Strong understanding of certificates and certificate creation.
Excellent analytical and problem-solving skills.
Ability to work independently and collaboratively in a team environment.
Excellent communication and interpersonal skills.
Self-motivated and reliable, with the ability to prioritize and work independently.
Aptitude for understanding and troubleshooting technical problems.

Nice To Haves

Certifications such as CISSP, SC-300, CCSP, Security+, or Microsoft certifications.
Prior ownership of an IAM tool or identity governance program.
Hands-on knowledge of PAM, secrets management, or identity threat detection.
Portfolio examples such as an RBAC matrix, IAM workflows, or automation scripts.
Familiarity with PowerShell scripting.
Experience working in a ticket tracking system.

Responsibilities

Lead scheduled and ad-hoc access reviews for human and non-human identities, applications, groups, cloud resources, and privileged accounts.
Create, maintain, and enforce IAM governance standards, policies, and procedures.
Monitor identity controls for audit support and compliance with internal and external frameworks.
Drive remediation of access-control gaps and advise projects regarding Active Directory and Entra.
Design and refine RBAC models, access tiers, and least-privilege practices with internal stakeholders.
Work with application owners to map permissions and standardize access roles.
Support M365 user lifecycle processes, including Joiner/Mover/Leaver processes and automated provisioning workflows.
Identify, design, and deploy automation for RBAC and access lifecycle processes.
Manage Active Directory and Entra users, computers/assets, and groups.
Support user and computer migrations during acquisitions and divestitures.
Own and administer one or more IAM platforms, including configuration, integrations, workflows, and improvements.
Coordinate IAM platform enhancements and upgrades and onboard systems securely with application teams.
Document provisioning rules and ensure consistent access patterns.
Provide technical support and guidance to business end-users and business application support team members.
Lead MFA/passkey implementation and support SSO integrations aligned with security requirements.
Create and manage SSO applications in Entra using SAML and OAuth knowledge.
Deploy and manage Active Directory domain controllers and DNS servers.
Create and manage internal and external certificates and lead automation of the digital certification process.
Review and approve access requests for elevated or sensitive roles.
Help investigate access-related security incidents and identity threats.
Provide internal teams with guidance on identity best practices.