Identity Security Engineer

The Identity Security Engineer will strengthen Little Caesar’s and all Ilitch Companies’ identity and access management security posture by driving governance, risk reduction, and secure lifecycle management across critical systems. This role is about ensuring that the right people have the right access at the right time through strong processes, well-managed IAM tools, and consistent oversight. You will serve as an agent of identity security, leading access reviews, improving RBAC models, optimizing IAM platforms, and partnering with teams across the business to drive secure identity practices., * IAM Governance & Oversight

• Lead scheduled and ad-hoc access reviews for human and non-human identities, applications, groups, cloud resources, and privileged accounts.

• Create, maintain and enforce IAM governance standards, policies, and procedures.

• Monitor identity controls for audit support and compliance with internal and external frameworks.

• Drive remediation efforts for access control gaps.

• Role-Based Access Control (RBAC) & Lifecycle Management

• Design and refine RBAC models, access tiers, and least-privilege principles with internal stakeholders.

• Work with application owners to map permissions and standardize access roles.

• Support user lifecycle processes (Joiner/Mover/Leaver) and automated provisioning workflows where available.

• IAM Tool Ownership & Administration

• Serve as primary owner/admin for one or more IAM platforms.

• Manage configuration, integrations, workflows, and system health.

• Coordinate enhancements, upgrades, and platform improvements.

• Partner with application teams to onboard new systems into the IAM ecosystem.

• Document entitlements, define provisioning rules, and ensure consistent access patterns.

• Engineering & Cloud Infrastructure Support

• Lead MFA/Passkey implementation and support SSO integrations and ensure alignment with security requirements.

• Security Operations Support

• Review and approve access requests for elevated or sensitive roles.

• Help investigate access-related security incidents and identity threats.

• Provide security guidance to internal teams for identity best practices.

• Hands-on experience with one or more IAM/IAG platforms.

• Working knowledge of access governance, RBAC, provisioning, and directory services.

• Understanding of SSO/MFA technologies, SAML/OIDC/OAuth protocols.

• Familiarity with compliance frameworks: NIST, SOX, ISO 27001, PCI.

• Accountable, humble, and courageous.

• Strong documentation and communication skills.

• Ability to partner with business and technical teams.

• Detail-oriented, organized, and able to drive tasks to completion.

Required Knowledge, Skills and Abilities:

Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or equivalent experience.

Minimum 2 in cybersecurity, IT, or similar discipline, with at least 1 year of hands-on identity security experience.

Preferred Knowledge, Skills and Abilities:

Certifications such as: CISSP, CCSP, Security+, etc., highly preferred.

Experience onboarding applications into IAM platforms.

Prior ownership of an IAM tool or identity governance program.

Participation in IAM modernization projects or cloud migration initiatives.

Demonstrated success implementing RBAC models or conducting large-scale access reviews.

Hands-on knowledge of PAM, secrets management, or identity threat detection.

Portfolio examples (RBAC matrix, IAM workflows, automation scripts, etc.).