Engineer, Identity and Access Management (IAM)

The Role

The Engineer, IAM is accountable for assisting with the planning, designing, and building of the enterprise digital employee and identity experience from a technical lens. You help define the future-state strategy, architecture, and roadmap for end-user and identity capabilities - ensuring the workforce can securely, reliably, and efficiently access the tools and information required to deliver business outcomes.

The role centers on intentional design, engineering and technical results, and scalable solutions, working in close partnership with Security, Infrastructure, Applications, global functions and manufacturing, and business leaders. Success is measured by clarity of strategy, strength of design, technical skill, readiness for transition to Run teams, and alignment to Clarios values and enterprise priorities.

What You’ll Do (Impact Areas)

• Strategy, vision & roadmap (Plan): help define the global strategy and future-state vision for identity services and capabilities aligned to Clarios business objectives, security posture, and growth plans - keeping strategies principled, risk-aware, and customer-centric while balancing productivity, security, compliance, and cost.
• Solution design & architecture (Build): design scalable, secure, user-centric solutions across identity domains; provide solid technical solutions, troubleshooting, and support for all IAM / Identity services; define standards and patterns that embed identity and access controls into end-user platforms, applications, and collaboration tools; partner with Enterprise Architecture and Security to align to architectural standards, security frameworks, and regulatory requirements; and make deliberate design trade-offs that reduce long-term risk and technical debt.
• Identity & access lifecycle enablement: design enterprise identity lifecycle models (joiner, mover, leaver) tightly integrated with HR processes and end-user access needs; define access governance, role design, and entitlement models that support least-privilege access while enabling business agility; and establish authentication and access design principles that deliver a seamless user experience without compromising security.
• End-user experience enablement: help define self-service, automation, and digital-experience improvements that simplify access and reduce friction for the workforce, ensuring solutions are globally scalable while allowing for regional and plant-specific requirements.
• Security, risk & compliance by design: embed security and compliance by design - not by exception - across all identity solutions; partner with Risk and Compliance teams to keep new capabilities audit-ready and aligned to enterprise control objectives; and proactively identify and mitigate identity-related risks through strong upfront design and governance.
• Transition readiness & governance: ensure all solutions are fully designed, documented, and ready for transition into Run organizations with clear ownership, controls, and success criteria, and establish design governance, decision frameworks, and success measures for consistent execution and accountability.
• Leadership & influence: influence enterprise direction through strong partnership, clear communication, and fact-based recommendations, and model Clarios values by fostering collaboration, accountability, and a high-performing team culture.

What Success Looks Like

• Well-architected solutions that transition smoothly into Run with minimal rework.
• Reduced long-term risk through intentional, identity-centric design.
• Strong trust from business, security, and IT partners.

Core Competencies

• Deep IAM / Identity engineering across Active Directory, Entra ID, and CyberArk (Saviynt a plus).
• Identity lifecycle design (joiner / mover / leaver) and access governance (RBAC / ABAC, least privilege, zero trust).
• Authentication and authorization design: SSO, MFA, SCIM, PAM, PKI, identity federation, and directory synchronization.
• Secure-by-design thinking across risk, compliance, and audit-readiness.
• Digital workplace architecture and scalable, user-centric solution design.
• Partnership, clear communication, and fact-based influence across enterprise stakeholders.

What You Bring (Qualifications)

Required

• Minimum of five (5) years of experience engineering IAM and Identity Services.
• Strong, hands-on technical capabilities within Identity services - Active Directory, Entra ID, CyberArk (Saviynt is a plus).
• Strong background in digital workplace architecture, identity lifecycle design, and access governance.
• Identity lifecycle management (joiner / mover / leaver processes).
• Technical understanding of authentication vs. authorization models.
• Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC).
• Least-privilege and zero-trust access principles, plus identity federation and directory synchronization.
• SSO, MFA, SCIM, PAM, PKI, scripting, and technical SME / troubleshooting capabilities.
• Experience with innovative IAM solutions such as passwordless, token, and card authentication within manufacturing environments.

About Clarios:

Clarios is the global leader in advanced, low-voltage battery technologies for mobility. Our batteries and smart solutions power nearly every type of vehicle and are found in 1 of 3 cars on the road today. With around 18,000 employees in over 100 countries, we bring deep expertise to our Aftermarket and OEM partners, and reliability, safety and comfort to everyday lives. We answer to the planet with a rigorous sustainability focus - advancing best-in-class sustainability practices and advocating for them across our industry. We work to ensure 100% of our products sold are recyclable, and we recycle 8,000 batteries an hour in our network. You can find more information here (PDF).

To All Recruitment Agencies: Clarios does not accept unsolicited agency resumes/CVs. Please do not forward resumes/CVs to our careers email addresses, Clarios employees or any other company location. Clarios is not responsible for any fees related to unsolicited resumes/CVs.

Equal Employment Opportunity:

Clarios, LLC is an equal employment opportunity and affirmative action employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, protected veteran status, status as a qualified individual with a disability, or any other characteristic protected by law. For more information, please view EEO is the Law, EEO is the Law (supplement), and Pay Transparency Non-discrimination. If you are an individual with a disability and you require an accommodation during the application process, please email [email protected].

A Note to Job Applicants: please be aware of scams being perpetrated through the Internet and social media platforms. Clarios will never require a job applicant to pay money as part of the application or hiring process.