Partner IAM - Security Platform Engineer
Posted Updated
Our Identity and Access Management platforms enable dealers, suppliers, and other external partners to securely access Ford applications and resources.
We are undertaking a critical modernization initiative to migrate B2B users from on-premises identity solutions to cloud-based identity services. This transformation is designed to improve the user and single sign-on experience, strengthen security and risk management, and enable greater automation of user onboarding and offboarding.
In this role, you will design, develop, deploy, and support scalable IAM capabilities using Microsoft Entra ID and Microsoft Entra External ID. You will work closely with globally distributed engineering, architecture, security, and application teams and contribute throughout the software development lifecycle.
- Design, build, test, and maintain secure applications and services using Java, Spring Boot, REST APIs, and relevant web technologies.
- Engineer identity solutions using Microsoft Entra ID and Microsoft Entra External ID, with a particular focus on external/B2B identities.
- Develop integrations with Microsoft Graph API and related Microsoft identity services.
- Design, develop, and maintain Spring Boot RESTful API microservices and web user interfaces.
- Collaborate with technical leads, architects, security teams, and application teams to deliver IAM platform capabilities aligned with enterprise security and architecture standards.
- Analyze, design, and implement tactical and strategic IAM solutions that improve the organization's security posture and user experience.
- Contribute to IAM platform strategy, technical architecture, and product roadmaps.
- Build and maintain monitoring, alerting, operational dashboards, and diagnostic capabilities using tools and query languages such as Kusto Query Language (KQL).
- Support production operations, including service requests, incidents, problems, and root-cause analysis.
- Create and maintain technical documentation, including architecture diagrams, API documentation, coding standards, configuration guidance, operational procedures, and application onboarding documentation.
- Apply Agile software development practices to deliver reliable, secure, and maintainable solutions.
- Build and use continuous integration and continuous delivery (CI/CD) pipelines to automate software build, testing, security validation, and deployment.
- Collaborate effectively with globally distributed and cross-functional teams.
- Demonstrate ownership across the end-to-end software engineering lifecycle, from requirements and design through development, testing, deployment, and production support.
- Use AI-assisted development tools, including GitHub Copilot or equivalent tools, to accelerate development, testing, documentation, and other software development lifecycle activities while maintaining appropriate security and quality controls.
- Participate in rotational on-call support as required.
Required
- Bachelor's degree in Computer Science, Information Technology, Engineering, or a related field, or equivalent practical experience.
- 5+ years of relevant software engineering, IAM, or IT experience.
- Hands-on experience designing or engineering identity solutions using Microsoft Entra ID, with experience supporting external/B2B identities.
- Strong experience developing RESTful APIs using Java and Spring Boot.
- Experience integrating applications with Microsoft Graph API.
- Experience with web application development using Angular or another modern JavaScript/TypeScript framework.
- Strong understanding of relational and/or NoSQL databases.
- Experience building APIs, batch services, or web applications with automated unit, integration, and end-to-end testing.
- Experience implementing automated build, test, security, and deployment processes using CI/CD pipelines.
- Experience with development tools such as GitHub, Jira, and Postman.
- Familiarity with application-security and DevSecOps tooling such as 42Crunch, SonarQube, or Checkmarx.
- Experience with PowerShell or comparable scripting/automation technologies.
- Experience troubleshooting complex enterprise applications and identity integrations.
- Strong problem-solving, communication, and collaboration skills.
- Ability to communicate complex technical concepts to engineering teams, application owners, business partners, and leadership.
- Experience collaborating effectively with globally distributed teams.
- Ability to manage priorities and ambiguity while delivering against deadlines.
- Ability to participate in rotational on-call support.
Preferred
- Deep hands-on experience with Microsoft Entra External ID for B2B/external customer or partner identity solutions.
- Experience with Google Cloud Platform, particularly Cloud Run, container-based services, Cloud Logging, and Cloud Monitoring.
- Experience with Microsoft Azure services.
- Experience with Azure DevOps for CI/CD pipeline management and deployment.
- Experience with Kusto Query Language (KQL) for monitoring, diagnostics, and operational analysis.
- Experience using AI-assisted engineering tools such as GitHub Copilot to support software development, testing, documentation, and delivery.
- Experience designing, deploying, and supporting IAM capabilities within a large enterprise environment.
#LI-MF2