Sr Information Security Engineer - IAM

Job Summary:

The Senior IAM Engineer is a hands-on technical role focused on the implementation, integration, and operation of enterprise identity solutions. This role is responsible for delivering and supporting Microsoft Entra , including the migration of existing identity platforms and applications to modern authentication models. Working closely with IAM Architecture and Security teams the engineer executes identity initiatives across cloud and on-premise environments, builds and maintains authentication and provisioning integrations while ensuring secure, reliable identity services that support the organization's operation and security objectives.

This is an on-site position located in Springfield, MO- remote work is not an option for this role.

Responsibilities and Duties:

* Execute identity platform initiatives including migrations from legacy identity providers to Entra .

* Configure and maintain cross-tenant identity scenarios including Multi-Tenant collaboration, B2B, and External

* Implement and support IAM solutions aligned with defined enterprise architecture, focusing on Microsoft Entra  hybrid identity environments.

* Configure and maintain core Entra : SSO, MFA, Conditional Access, Passwordless authentication, B2B access, Identity protection policies and risk-based controls.

* Integrate applications using modern authentication protocols: OIDC, OAuth2, SAML

* Configure and Manage:
Enterprise Applications, App Registrations, API permissions and consent.

* Implement and maintain identity provisioning solutions using: SCIM, API-Based Provisioning, Event-Drive or Scheduled workflows.

* Support and enhance identity lifecycle processes:
Joiner / Mover / Leaver, Access Requests and Approvals, Role and Group-Based access assignment

* Develop Automation and Integration solutions using Powershell, Microsoft Graph API, and Logic Apps or equivalent tooling.

* Build reusable scripts and processes to standardize IAM operations.

* Support adoption of managed identities and service principals for application and workload authentication.

* Implement and support identity security controls aligned with organizational and regulatory requirements.

* Diagnose and resolve issues related to authentication failures, provisioning errors, directory synchronization issues, access and authorization problems.

* Provide technical input and feedback to improve IAM implementations and operational processes.

* Provide hands-on technical mentorship and implementation guidance where appropriate at all levels.

Core Identity and Directory Services

* Core Services (user/group/device)

* Federated Identities

* Custom attributes and schema extensions

* Dynamic Groups

* Directory role strategies for enterprise delegation

Authentication and Access Control

* SSO

* Conditional Access

* Passwordless Authentication

* B2B

Identity Protection and Risk

* User Risk Detection

* Sign-in Risk Detection

* Using Risk with Conditional Access

* Risk Remediation Policies

* Supporting SIEM/SOAR integration

* Logs and Forensics

Identity Governance and Administration

* Access Reviews

* Access Request Workflows

* Time-Bound Access

* Identity and Access Lifecycle (Mover/Joiner/Leaver)

* Augmentation with Logic Apps and other automation technologies.

Application Access and SSO

* OIDC, OAuth2, SAML

* Enterprise Applications

* Application Registrations

* API permissions and consent

* Application Proxy

* Token Configuration and Claims Refinement

Provisioning and Lifecycle

* Guest Users

* Cross Tenant access

* External IDs

Skills:

Required:

* Experience with enterprise scale identity migrations

* Familiarity with Okta, Active Directory, Open LDAP or other like identity providers.

Active Directory experience is required.

* Deep knowledge of modern authentication protocols including but not limited to OIDC/OAuth2, SAML, WSFED, etc.

* Familiarity with modern authorization, session, and token handling patterns including but not limited to claims-based authorization, back-channel logout, token introspection, token refinement, etc.

* Strong knowledge of Entra  including but not limited to the features listed below:

Preferred:

* Retail Industry

Experience with a strong understanding of store operations, merchandising, and omnichannel commerce.

* Auto Parts Industry Knowledge, including familiarity with aftermarket supply chains, inventory management, and distribution networks.

* Familiarity with Master Data Management (MDM) principles, architectures, and implementations.

* Experience with international, multi-lingual product catalog solutions and localization strategies.

* Experience with retail POS solutions and Commerce CMS platforms.

* Experience with Warehouse Automation & Material Handling Solutions

O'Reilly Auto Parts has a proven track record of growth and stability. O'Reilly is full of successful career stories and believes in a strong promote-from-within philosophy, encouraging you to grow your career along with the organization.

Total Compensation Package:

* Competitive Wages & Paid Time Off

* Stock Purchase Plan & 401k with…