10041 - Engineering Systems Administrator, Identity Access Management (IAM)
Location: Irvine, CA 92614 (5 days on-site)

What you will be doing:

The selected Engineering Systems Administrator III - IAM will design, implement, administer, and maintain the organization's Identity and Access Management (IAM) infrastructure and associated security platforms. This role is responsible for ensuring secure, complaint, and efficient access to enterprise systems, applications, and data. The IAM Engineer will maintain identity lifecycle processes, authentication systems, privileged access controls, and directory services while ensuring the security and integrity of all identity-related systems.
The IAM Engineer will perform administration activities including user provisioning and deprovisioning, role and group management, access certifications, Single Sign-On (SSO), Multi-Factor Authentication (MFA), and privileged account management. The role will coordinate with Cybersecurity, Infrastructure, Application Owners, and Business Leaders to design, implement, and support identity governance initiatives and access control frameworks.

Key Roles & Responsibilities

Identity Lifecycle Management

• Administer and support enterprise Identity and Access Management platforms, including Microsoft Entra ID (Azure AD), Active Directory, and related IAM technologies.
• Manage user lifecycle processes including onboarding, role changes, transfers, and offboarding.
• Create, modify, and remove user accounts, groups, roles, and permissions in accordance with organizational policies and security standards.
• Develop and maintain Role-Based Access Control (RBAC) models and least-privilege access principles.
• Coordinate and support user access reviews, certifications, and compliance audits.

IAM Automation & Integration
Automate identity administration activities through scripting and IAM workflows using technologies such as PowerShell, Microsoft Graph, Group Policy, and third-party IAM solutions to:

• Automatically provision new users with predefined roles, permissions, and access rights.
• Modify user attributes, group memberships, licenses, and application access based on business requirements.
• Securely deprovision users and remove associated access and resources upon termination or transfer.
• Streamline identity governance processes and reduce manual administration tasks.
• Integrate enterprise applications with identity providers using SAML, OAuth, OpenID Connect (OIDC), LDAP, and SCIM.

Security & Access Management

• Implement and administer Single Sign-On (SSO), Multi-Factor Authentication (MFA), Conditional Access, and authentication policies.
• Manage privileged accounts and support Privileged Access Management (PAM) initiatives.
• Monitor authentication and authorization systems to identify unauthorized access attempts and security risks.
• Partner with Cybersecurity teams to investigate identity-related incidents, access violations, and compliance concerns.
• Ensure identity systems adhere to Zero Trust security principles and applicable regulatory requirements.

System Administration & Support

• Develop methodologies to monitor, evaluate, and maintain IAM systems and services to ensure maximum performance and availability.
• Troubleshoot and resolve identity, authentication, authorization, federation, and directory service issues.
• Support and administer identity-related platforms, security services, and integrated business applications.
• Consult with infrastructure, engineering, and application teams to develop access management requirements and resolve complex technical issues.
• Coordinate IAM-related software upgrades, platform enhancements, and security updates.

Documentation & Compliance

• Develop and maintain technical documentation, standards, processes, procedures, and system configurations.
• Document IAM activities, access control changes, system outages, audit findings, and remediation activities.
• Create and maintain disaster recovery, backup, and testing procedures for IAM systems.
• Support internal and external audits by providing evidence of access controls, certifications, and compliance activities.

Security Responsibilities

• Remain current with emerging identity security threats, attack vectors, and IAM technologies.
• Participate in vulnerability remediation and security hardening activities related to identity services.
• Ensure identity platforms, directory services, and authentication infrastructure remain updated according to company security policies and procedures.
• Apply security patches, test updates, and maintain secure configurations for IAM systems and services.
• Support implementation of Zero Trust, Identity Governance and Administration (IGA), and Privileged Access Management (PAM) programs.

What we require from you:

• Bachelor's Degree or the equivalent of 5-7+ years experience in position with similar responsibilities.
• Excellent analytical and problem solving skills
• Collaborative, team player who is willing to assist users with their tasks when needed.
• Strong verbal and written and communication skills

Team Culture:

Our team thrives on collaboration, innovation, and continuous learning. We foster a supportive environment where every member is encouraged to share ideas and contribute to problem-solving. We value:

• Passion for Technology:We are enthusiastic about emerging technologies and their potential to transform the automotive industry.
• Agility:We work in an agile environment, adapting quickly to changes and continuously improving our processes.
• Teamwork:We believe in the power of teamwork and collaboration, supporting each other to achieve common goals.
• Growth:We prioritize personal and professional growth, offering opportunities for learning and development.
• Inclusivity:We maintain an inclusive culture where diverse perspectives are valued and everyone feels welcome.

Base Salary Range: $100,000 - $125,000