Identity Security Engineer

Strengthen identity and access management security across Little Caesars and all Ilitch Companies as an Identity Security Engineer in Detroit, MI (onsite) . This role focuses on governance, risk reduction, and secure identity lifecycle management, with hands-on ownership of IAM platforms, access review leadership, and improvements to RBAC and least-privilege access.

What you’ll do

• Lead scheduled and ad-hoc access reviews for human and non-human identities, including applications, groups, cloud resources, and privileged accounts.
• Create, maintain, and enforce IAM governance standards, policies, and procedures to support consistent access practices.
• Monitor identity controls to support audit and compliance efforts across internal and external frameworks.
• Drive remediation for access control gaps and address findings through to completion.
• Design and refine RBAC models, access tiers, and least-privilege principles with internal stakeholders.
• Partner with application owners to map permissions and standardize access roles.
• Support Joiner/Mover/Leaver lifecycle processes and automated provisioning workflows where available.
• Act as the primary owner/admin for one or more IAM platforms, handling configuration, integrations, workflows, and system health .
• Coordinate IAM enhancements, upgrades, and platform improvements , and onboard new systems into the IAM ecosystem with application teams.
• Document entitlements, define provisioning rules , and ensure consistent access patterns.
• Lead MFA/Passkey implementation , support SSO integrations , and ensure alignment with security requirements.
• Review and approve access requests for elevated or sensitive roles .
• Support investigation of access-related security incidents and identity threats.
• Provide identity security guidance to internal teams on identity best practices.

What you bring

• Hands-on experience with one or more IAM/IAG platforms .
• Working knowledge of access governance, RBAC, provisioning, and directory services .
• Understanding of SSO/MFA technologies and SAML/OIDC/OAuth protocols.
• Familiarity with compliance frameworks including NIST, SOX, ISO 27001, and PCI .
• Accountable, humble, and courageous approach; strong documentation and communication skills.
• Ability to partner with business and technical teams.
• Detail-oriented, organized, and able to drive tasks to completion.

Education and experience

• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or equivalent experience.
• Minimum 2 years in cybersecurity, IT, or similar discipline, including at least 1 year of hands-on identity security experience.

Helpful experience (preferred)

• Certifications such as CISSP, CCSP, Security+ , etc.
• Experience onboarding applications into IAM platforms.
• Prior ownership of an IAM tool or identity governance program.
• Experience participating in IAM modernization or cloud migration initiatives.
• Demonstrated success implementing RBAC models or conducting large-scale access reviews.
• Hands-on knowledge of PAM, secrets management, or identity threat detection .
• Portfolio examples such as an RBAC matrix , IAM workflows, and automation scripts.

Technologies: IAM, IAG, RBAC, SSO, MFA, Passkey, SAML, OIDC, OAuth, NIST, SOX, ISO 27001, PCI.