IAM Engineer II - AD and Entra ID

Job Description
Company Description:
McDonald's evolving Accelerating the Arches growth strategy puts our customers and people first and demonstrates our competitive advantages to strengthen our brand. We are recognized on lists like Fortune's Most Admired Companies and Fast Company's Most Innovative Companies.
Doubling Down on the 4Ds (Delivery, Digital, Drive Thru, and Development)
Our growth pillars emphasize the critical role technology plays as the best-in-class, global omni-channel restaurant brand. Technology enables the organization through digital technologies, and improving the customer, crew and employee experience each and every day!
Global Technology forging the way
Leading the digitization of our business is the Technology organization made up of innovation specialists who build industry defining tech using the latest innovations and platforms, like AI and edge computing to deliver on the next set of groundbreaking opportunities for the business. We take on technology innovation challenges at an incredible scale, and work across global teams who are always hungry for a challenge! This provides access to compelling career paths for technologists. It's bonus points when you get to see your family and friends use the tech you build at their favorite McD restaurant.
Job Description:
As an IAM Engineer II for our Identity and Access Engineering team, you will work with the IAM Architect III leading our AD and Entra ID architecture practice. In this role you will help architect and craft secure and scalable solutions for Active Directory and Entra ID, partnering with our product and technical teams to build secure, user-centric identity and access experiences that delight our employees, franchisees, partners, and restaurant staff. This is an exciting opportunity to continue to evolve and improve the global identity and access management platform at the world's largest restaurant company!
Accountabilities & Responsibilities

• Architect and design secure and scalable solutions for Active Directory and Entra ID.
• Assist in the development and execution of strategies for implementing solutions to meet the needs of the business.
• Provide technical assistance in the areas of identity and access management and ensure alignment with best practices and security standards.
• Collaborate with IAM product and technical teams to help define and implement the product roadmap for identity and access products, translate business requirements into technical solutions, and provide consultation on identity and authentication processes.
• Evaluate existing systems and recommend improvements to Active Directory and Entra ID environments where applicable.
• Ensure identity and access solutions are powerful and secure by implementing the latest AD and Entra ID features, security trends, and standard methodologies to ensure.
• Collaborate with multi-functional teams, including developers, engineers, and project managers, to deliver successful Entra / Azure implementations.
• Configure Entra / Azure features, including custom policies, user registration flow, progressive profiling, consent management, multi-factor authentication, and integration with various identity providers.
• Leverage solid grasp of identity federation standards such as SAML, OAuth, and OpenID Connect
• Prepare comprehensive Technical documentation, including architecture diagrams, system configurations, and operational procedures. Generate reports on IAM system performance, compliance status, and security incidents.
• Collaborate with other IT teams, partners, and vendors to deliver effective IAM solutions. Provide technical guidance and mentorship to junior team members.

"The salary range for the role is $ 96230 - $ 122690 per year."
Qualifications:
Basic

• 3+ years professional experience as an IAM Architect or similar role, designing and implementing enterprise-level IAM solutions.
• Knowledge of IAM concepts, protocols, and technologies, including but not limited to identity provisioning, authentication, authorization, RBAC, SSO, and federation.
• Technical experience with Active Directory, Azure Active Directory, and other Microsoft identity and access related technologies.
• Understanding of industry frameworks and standards such as OAuth, SAML, OpenID Connect, and LDAP.
• Familiarity with cybersecurity principles and standard methodologies, including risk management, access controls, and secure coding.

Preferred

• Strong analytical and problem-solving skills, with the ability to assess business requirements and translate them into practical IAM solutions.
• Superb communication and interpersonal skills, with the ability to optimally collaborate with multi-functional teams and partners at various organizational levels.
• Relevant certifications such as CISSP, CISM, or vendor-specific IAM certifications are highly desirable.

"The salary range for the role is $ 96230 - $ 122690 per year."
Additional Information:
McDonald's is committed to providing qualified individuals with disabilities reasonable accommodations to perform the essential functions of their jobs. Additionally, if you (or another applicant of whom you are aware) require assistance accessing or reading this job posting or otherwise seek assistance in the application process, please contact [email protected]
McDonald's provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to sex, sex stereotyping, pregnancy (including pregnancy, childbirth, and medical conditions related to pregnancy, childbirth, or breastfeeding), race, color, religion, ancestry or national origin, age, disability status, medical condition, marital status, sexual orientation, gender, gender identity, gender expression, transgender status, protected military or veteran status, citizenship status, genetic information, or any other characteristic protected by federal, state or local laws. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.
Nothing in this job posting or description should be construed as an offer or guarantee of employment.