Identity & Access Management Engineer

To be responsible for designing, implementing, and maintaining secure, scalable identity and access solutions that protect the organizations systems and data while enabling efficient and compliant access for users. This role serves as a technical lead for IAM, ensuring authentication, authorization, and access governance aligning with security best practices, regulatory requirements, and business needs.

Administer and secure user identities across the Family of Companies by supporting day-to-day identity and access management operations, automated joiner/mover/leaver workflows, troubleshooting complex access issues and support team members through knowledge sharing and guidance.

Design, implement, and maintain secure, scalable IAM solutions, processes, and standards that improve operational efficiency, enforce least-privilege access, and reduce identity-related risk.

Maintain in-depth knowledge of identity usage within all company systems, accurate documentation, operational procedures, IAM standards, and continually assess and improve workflows to align with business needs and security best practices.

Collaborate with application owners, business stakeholders and IT teams to ensure secure access, improve identity security, reduce risk, and support compliance with regulatory and organizational requirements.

• Bachelor's degree in computer science or related field required, or equivalent experience may be considered.
• Minimum of three to five years of experience in Identity and Access Management (IAM), Security Engineering, or a related information security role required.
• Diverse data processing experience in a large multi-server wide area network environment utilizing Microsoft Windows workstations required.
• Hands-on experience using security systems and identity platforms, including Microsoft Entra  (Azure AD), Single Sign-On (SSO), federated identity, Multi-Factor Authentication (MFA), and Conditional Access, Log management, SIEM, Content Filtering, Data Loss Prevention, eDiscovery and In-Place Hold.
• Experience implementing role-based access control, privileged access models (PIM/PAM), and joiner/mover/leaver workflows.
• Experience with Microsoft products and security best practices for their use, especially with Active Directory, Group Policy Objects, and Power Shell/GUI administration tools required.
• Knowledge of Zero Trust principles, least-privilege access models and IAM governance best practices.
• Ability to communicate well with all levels of the organization including end users, technical personnel, and management required.
• Experience supporting audit, compliance, or regulatory requirements related to identity and access controls.

Note: This is a Hybrid position working both remotely from the State of Michigan and Onsite in the Farm Bureau Home Office located in Lansing, Michigan (when it is required). Candidates may also work Onsite if they prefer that environment.

• Farm Bureau offers a full benefit package including medical, dental, vision, and 401K.