Senior Identity Engineer

null, AAA Texas LLC • Coppell, TX

7d

About The Position

The Senior Identity Engineer will focus on identity architecture and platform engineering within Auto Club Enterprises’ Enterprise Identity Engineering (EIE) team. The role researches, designs, engineers, integrates, and supports secure identity capabilities across on-premises, cloud, and hybrid environments. It provides hands-on technical leadership for complex identity initiatives and turns architecture into implemented, tested, monitored, and supportable solutions.

The position combines enterprise-directory and modern-identity-protocol expertise with practical engineering skills. It strengthens platform resilience, reduces single-person dependencies, establishes reusable architecture patterns, and advances identity capabilities for workforce, non-human, workload, and AI identities. The engineer collaborates across architecture, cybersecurity, infrastructure, cloud, application development, automation, and business teams, and provides remote after-hours support during major outage conditions.

Requirements

• Demonstrated experience designing and implementing enterprise identity solutions, not solely administering existing products.
• Deep knowledge of Active Directory in large multi-site or multi-forest environments, including authentication, Kerberos, trusts, directory dependencies, recovery considerations, and Windows and non-Windows interoperability.
• Strong experience with Entra ID, Entra Connect synchronization, hybrid identity, federation, conditional access concepts, and cloud identity integration.
• Strong knowledge of SAML, OAuth, OpenID Connect, LDAP, SCIM, MFA, PKI, RBAC, least privilege, secrets management, and privileged access patterns.
• Experience creating architecture diagrams, design records, integration patterns, failure-mode analysis, recovery plans, implementation roadmaps, and operational handoff documentation.
• Working development and automation skills in Python or PowerShell, plus experience with APIs, Git, CI/CD, automated testing, and Infrastructure as Code or configuration management.
• Experience engineering highly available, fault-tolerant, monitored, and recoverable enterprise services.
• Ability to independently research an unfamiliar technology, build or guide a proof of concept, assess security and business tradeoffs, and recommend a scalable approach.
• Advanced troubleshooting skills using logs, telemetry, protocol traces, packet analysis, and cross-platform dependency mapping.
• Excellent communication and ability to lead technical decisions and implementation across Architecture, Cybersecurity, Infrastructure, Cloud, Application Development, and business teams.

Nice To Haves

• Experience with Semperis Directory Services Protector, Active Directory Forest Recovery, Lightning Intelligence, or comparable identity threat detection and recovery technologies.
• Experience with Okta agents or comparable federation, directory integration, and cloud identity provider components.
• Experience with Microsoft PKI, Keyfactor, DigiCert Trust Lifecycle Manager, certificate orchestration, Thales Luna HSM, or comparable certificate and cryptographic platforms.
• Experience with CyberArk PAM, CyberArk secrets management, Conjur, or comparable privileged access and non-human credential platforms.
• Experience with Thales SafeNet Trusted Access, CipherTrust, or comparable MFA and key-management platforms.
• Experience with Infoblox DNS, F5 GTM, AD LDS, ManageEngine identity administration and audit products, or comparable enterprise infrastructure services.
• Experience with workload identity, non-human identity governance, AI agent identity, MCP integration security, authorization policy, secrets, and auditability.
• Experience with Splunk, Wireshark, ExtraHop, or comparable diagnostic and observability tools.
• Experience with Zero Trust architecture, cloud-native identity in Microsoft Azure or AWS, and secure application integration patterns.

Responsibilities

• Design and engineer identity architectures for authentication, authorization, federation, identity lifecycle, governance, privileged access, secrets, MFA, directories, certificate services, and workload identity.
• Lead research, options analysis, proofs of concept, technical design, security review, and implementation planning for new identity products and capabilities.
• Engineer Active Directory and Entra ID solutions across multi-site, multi-forest, cloud, and hybrid environments, including Entra Connect synchronization and heterogeneous authentication.
• Design integrations using SAML 2.0, OAuth 2.0, OpenID Connect, LDAP, SCIM, Kerberos, API-based provisioning, certificates, and secure secrets patterns.
• Improve identity resilience through recovery architecture, threat detection, monitoring, failure-mode analysis, disaster recovery, testing, and operational readiness.
• Engineer and integrate PKI, certificate lifecycle, HSM, MFA, PAM, secrets-management, and federation-agent technologies.
• Define patterns for non-human identity, workload identity, service principals, machine credentials, AI agents, MCP integrations, authorization, auditability, and governance.
• Partner with developers and automation engineers to translate designs into code, pipelines, Infrastructure as Code, automated tests, monitoring, and production deployments.
• Troubleshoot complex cross-platform identity issues using authentication-flow analysis, packet traces, logs, telemetry, and root-cause analysis.
• Create reference architectures, segmentation diagrams, design decisions, standards, runbooks, recovery procedures, test evidence, and handover documentation.
• Mentor engineers, conduct design reviews, lead technical work across teams, and provide remote after-hours support during major outage conditions.

Benefits

• Health coverage for medical, dental, and vision.
• 401(k) savings plan with company match and pension.
• Tuition assistance.
• Floating holidays and PTO for community volunteer programs.
• Paid parental leave.
• Wellness programs.
• Employee discounts on membership, insurance, travel, entertainment, services, and more.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed