Cybersecurity Engineer II

Job Description:

Company

Description:

McDonald’s growth strategy, Accelerating the Arches, encompasses all aspects of our business as the leading global omni-channel restaurant brand. As the consumer landscape shifts we are using our competitive advantages to further strengthen our brand. One of our core growth strategies is to Double Down on the 3

Ds (Delivery, Digital and Drive Thru). McDonald’s will accelerate technology innovation so 65M+ customers a day will experience a fast, easy experience, whether at one of our 25,000 and growing Drive thrus, through McDelivery, dine-in or takeaway.

McDonald’s Global Technology is here to power tomorrow’s feel-good moments.

That’s why you’ll find us at the forefront of transformative technology, exploring new and innovative ways to serve our millions of customers and spread happiness one delicious Hot Fudge Sundae-dipped fry at a time. Using AI, robotics and emerging tech, we’re digitizing the Golden Arches. Combine that with our unparalleled global scale, and we’re reshaping all areas of the business, industry and every community that is home to a McDonald’s restaurant.

We face complex tech challenges every day. But that’s where our diverse and talented teams come in. They’re made up of the best and brightest from all over the globe, and they thrive in the space where feel-good meets fast-paced.

Check out the McDonald’s Global Technology Technical Blog to learn how technology and our global team are directly enabling the Accelerating the Arches strategy.

As an IAM Engineer II on our Identity and Access Management team, you will report to the Manager leading Authentication and Access Control services engineering and operations. In this role you will implement secure and scalable authentication and access control solutions, partnering with other IAM and technical teams to build secure, user-centric identity and access experiences that delight our employees, franchisees, partners, and restaurant staff.

This is an exciting opportunity to continue to evolve and enhance the global identity and access management platform at the world’s largest restaurant company.

• Help to design, implement, and maintain secure and scalable solutions for authentication and access control using Microsoft Entra.
• Assist in the development and execution of strategies for implementing solutions to meet the needs of the business.
• Provide technical assistance in the areas of identity and access management and ensure alignment with best practices and security standards.
• Collaborate with other IAM product and technical teams to help define and execute the product roadmap for identity and access products, translate business requirements into technical solutions, and provide consultation on identity and authentication processes.
• Evaluate existing systems and recommend improvements to authentication and access control services.
• Help to ensure identity and access solutions are cutting‑edge and secure by implementing the latest authentication and access control features, security trends, and best practices to ensure.
• Collaborate with cross‑functional teams, including developers, engineers, and project managers, to deliver successful Active Directory and Entra implementations.
• Assist in the preparation of comprehensive technical documentation, including architecture diagrams, system configurations, and operational procedures. Generate reports on IAM system performance, compliance status, and security incidents.
• Collaborate with other IT teams, stakeholders, and vendors to deliver effective IAM solutions.

• 3+ years professional experience as an IAM Engineer or similar role, implementing and operating enterprise‑level authentication and access control solutions.
• Knowledge of IAM concepts, protocols, and technologies, including but not limited to identity provisioning, authentication, authorization, RBAC, SSO, and federation.
• An understanding of Entra capabilities such as contextual login, step up authentication, or impossible travel for example.
• Experience with other identity platforms such as Okta, PING, etc., is a plus.
• Some technical experience with Active…