Identity and Access Management Engineer

Open Dealer Exchange is seeking an Identity and Access Management (IAM) Engineer to support its workforce in Southfield, MI. The ideal candidate will have deep experience with Entra ID, Active Directory, identity lifecycle automation, and governing access in regulated enterprise environments.

What You Will Do

As an IAM Engineer, you will own and mature our identity security posture across a complex, multi-platform environment, serving as the primary driver of a structured role based access control (RBAC) program and a trusted technical advisor across infrastructure, IT, and development teams.

Why It Might Be a Fit

The ideal candidate will have 5+ years of hands-on IAM engineering experience, with at least 3 years focused on Entra ID (Azure AD) in enterprise environments, and a deep working knowledge of Active Directory, including group policy, OU design, domain trust models, and hybrid identity patterns.

Requirements

• 5+ years of hands-on IAM engineering experience, with at least 3 years focused on Entra ID (Azure AD) in enterprise environments
• Deep working knowledge of Active Directory, including group policy, OU design, domain trust models, and hybrid identity patterns
• Demonstrated experience designing and implementing RBAC models at scale in complex or legacy environments
• Hands-on experience with Entra ID Governance, including access reviews, entitlement management, lifecycle workflows, and Privileged Identity Management (PIM)
• Strong working knowledge of OAuth 2.0, OIDC, and SAML, sufficient to review developer implementations and identify security risk
• Practical experience automating identity lifecycle events using Logic Apps, Azure Functions, PowerShell, or the Microsoft Graph API
• Ability to communicate risk clearly to non-technical stakeholders and produce compliance-ready documentation

Benefits

• Excellent compensation/benefit package
• Hybrid work model