Identity Security Engineer

The Customer Identity Platform Engineer will contribute to the engineering, development, and 24/7 support of identity and access management highly available solutions for the customer identity platform. The successful candidate will work closely with other Ford teams (business teams, cyber security, applications teams, other technical teams) and our partners to ensure the Customer IAM (CIAM) platform is providing the secure, premium customer experience required to deliver the Ford focus areas. This position requires an individual with a continuous improvement mindset who is driven by the pursuit of operational excellence with the fortitude to build technical prowess to navigate the CIAM ecosystem, networking, security compliance, and software development.

• Collaborate with the Technical Anchor to design, engineer, develop, deploy, and support new Azure AD B2C and EEID software and platform features that adhere to Ford security, architecture, and IAM standards.
• Support delivery of tactical and strategic IAM solutions, including analysis, design, and implementation to improve security posture.
• Contribute to the development and implementation of IAM strategies and roadmap.
• Develop and maintain metric dashboards and monitoring/alerting systems.
• Provide day-to-day operations of requests, incidents, and problems.
• Create and maintain technical documentation for team and integrating applications (e.g., architecture diagrams, API documentation, coding standards, operational processes, procedures, configurations, application onboarding tips, etc.)
• Use modern software development Agile methodologies to deliver high-quality software on time and on budget.
• Use modern software delivery pipelines to automate the deployment and testing of software and platform features.
• Maintain and update Ford custom policies using the Identity Experience Framework.
• Maintain and update UI (visual presentation of user journeys) in accordance with the Ford UI Design Team provided specifications.
• Write clean, efficient, and maintainable code in C#, .NET Core, or other relevant languages that can integrate with Azure Graph APIs.

• Bachelor's Degree or a Combination of Education/Employment
• 3 to 5 years of experience with:
  • Demonstrated understanding and the application/implementation of IAM principles, multi-factor authentication, and conditional access.
  • Working collaboratively to identify and solve problems with a globally dispersed and diverse team.
  • Designing, engineering, developing, deploying, and supporting features for a large, complex enterprise organization.
  • Demonstrated strong problem-solving skills.
  • Demonstrated ability to explain complex technical concepts to a variety of audiences (e.g., team members, business partners, senior management)
  • Demonstrated strong verbal, interpersonal, and written skills with the ability to work directly with business owners and application teams for gathering information and troubleshooting.
  • Demonstrated ability to work under pressure, meet strict deadlines, challenge the status quo, and manage ambiguity.
• 1 to 2 years of experience with:
  • Dedication to delivering a secure, always-on customer identity platform.
  • Demonstrated understanding of Azure AD B2C or EEID
  • Understanding of Application Insights, Log Analytics, Azure App Services, Azure API Management.
  • Demonstrated experience with Dev Enablement Tools (e.g., Jira, GitHub, Postman, etc.).
  • Demonstrated experience with PowerShell
• Ability to support 24/7 coverage (rotational on-call support).

Preferred Requirements: 

• 3-5 years of experience managing Azure AD B2C.
• 2-5 years of experience with PowerShell, C#, .NET Core, or other relevant languages.
• Experience designing, engineering, developing, deploying, and supporting features for a large, complex enterprise organization.
• Understanding of Site Reliability Engineering (SRE) principles.
• Industry recognized certifications a plus (e.g., AZ-900: Azure Fundamentals, Certified Information Systems Security Professional (CISSP))