Identity Security Engineer
Job Description
The Identity Security Engineer will improve Little Caesars and all Ilitch Companies’ identity and access management security posture by leading governance activities, strengthening role-based access controls, and supporting secure identity lifecycle processes.
Location
Detroit, MI (onsite)
Key Responsibilities
- Lead scheduled and ad-hoc access reviews covering human and non-human identities, applications, groups, cloud resources, and privileged accounts.
- Create, maintain, and enforce IAM governance standards, policies, and procedures.
- Monitor identity controls to support audit readiness and alignment with internal and external frameworks.
- Drive remediation efforts for identified gaps in access control.
- Design and refine RBAC models, access tiers, and least-privilege principles with internal stakeholders.
- Partner with application owners to map permissions and standardize access roles.
- Support user lifecycle processes (Joiner/Mover/Leaver) and automated provisioning workflows where available.
- Act as the primary owner/admin for one or more IAM platforms, managing configuration and ongoing operations.
- Manage IAM integrations, workflows, and system health, coordinating enhancements, upgrades, and platform improvements.
- Partner with application teams to onboard new systems into the IAM ecosystem.
- Document entitlements, define provisioning rules, and ensure consistent access patterns across systems.
- Lead MFA/Passkey implementation and support SSO integrations while ensuring alignment with security requirements.
- Review and approve access requests for elevated or sensitive roles.
- Assist with investigations into access-related security incidents and identity threats.
- Provide security guidance to internal teams on identity best practices.
Required Qualifications
- Hands-on experience with one or more IAM/IAG platforms.
- Working knowledge of access governance, RBAC, provisioning, and directory services.
- Understanding of SSO/MFA technologies and SAML/OIDC/OAuth protocols.
- Familiarity with compliance frameworks including NIST, SOX, ISO 27001, and PCI.
- Minimum 1 year of hands-on identity security experience, with at least 2 years in cybersecurity, IT, or a related discipline.
- Accountable, humble, and courageous approach to work.
- Strong documentation and communication skills.
- Ability to partner with both business and technical teams.
- Detail-oriented, organized, and able to drive tasks to completion.
- Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or equivalent experience.
Preferred Qualifications
- Certifications such as CISSP, CCSP, Security+, etc.
- Experience onboarding applications into IAM platforms.
- Prior ownership of an IAM tool or participation in an identity governance program.
- Experience in IAM modernization projects or cloud migration initiatives.
- Proven success implementing RBAC models or performing large-scale access reviews.
- Hands-on knowledge of PAM, secrets management, or identity threat detection.
- Portfolio examples such as RBAC matrices, IAM workflows, and automation scripts.
Technologies
IAM, IAG, RBAC, SSO, MFA, Passkey, SAML, OIDC, OAuth, NIST, SOX, ISO 27001, PCI