Identity Security Engineer

Strengthen identity and access management security across Little Caesars and all Ilitch Companies as an Identity Security Engineer in Detroit, MI (onsite). This role focuses on governance, risk reduction, and secure identity lifecycle management, with hands-on ownership of IAM platforms, access review leadership, and improvements to RBAC and least-privilege access.

What you’ll do

• Lead scheduled and ad-hoc access reviews for human and non-human identities, including applications, groups, cloud resources, and privileged accounts.
• Create, maintain, and enforce IAM governance standards, policies, and procedures to support consistent access practices.
• Monitor identity controls to support audit and compliance efforts across internal and external frameworks.
• Drive remediation for access control gaps and address findings through to completion.
• Design and refine RBAC models, access tiers, and least-privilege principles with internal stakeholders.
• Partner with application owners to map permissions and standardize access roles.
• Support Joiner/Mover/Leaver lifecycle processes and automated provisioning workflows where available.
• Act as the primary owner/admin for one or more IAM platforms, handling configuration, integrations, workflows, and system health.
• Coordinate IAM enhancements, upgrades, and platform improvements, and onboard new systems into the IAM ecosystem with application teams.
• Document entitlements, define provisioning rules, and ensure consistent access patterns.
• Lead MFA/Passkey implementation, support SSO integrations, and ensure alignment with security requirements.
• Review and approve access requests for elevated or sensitive roles.
• Support investigation of access-related security incidents and identity threats.
• Provide identity security guidance to internal teams on identity best practices.

What you bring

• Hands-on experience with one or more IAM/IAG platforms.
• Working knowledge of access governance, RBAC, provisioning, and directory services.
• Understanding of SSO/MFA technologies and SAML/OIDC/OAuth protocols.
• Familiarity with compliance frameworks including NIST, SOX, ISO 27001, and PCI.
• Accountable, humble, and courageous approach; strong documentation and communication skills.
• Ability to partner with business and technical teams.
• Detail-oriented, organized, and able to drive tasks to completion.

Education and experience

• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or equivalent experience.
• Minimum 2 years in cybersecurity, IT, or similar discipline, including at least 1 year of hands-on identity security experience.

Helpful experience (preferred)

• Certifications such as CISSP, CCSP, Security+, etc.
• Experience onboarding applications into IAM platforms.
• Prior ownership of an IAM tool or identity governance program.
• Experience participating in IAM modernization or cloud migration initiatives.
• Demonstrated success implementing RBAC models or conducting large-scale access reviews.
• Hands-on knowledge of PAM, secrets management, or identity threat detection.
• Portfolio examples such as an RBAC matrix, IAM workflows, and automation scripts.

Technologies: IAM, IAG, RBAC, SSO, MFA, Passkey, SAML, OIDC, OAuth, NIST, SOX, ISO 27001, PCI.