Key responsibilities
IAM Governance & Oversight
Lead scheduled and ad-hoc access reviews for human and non-human identities, applications, groups, cloud resources, and privileged accounts.
Create, maintain and enforce IAM governance standards, policies, and procedures.
Monitor identity controls for audit support and compliance with internal and external frameworks.
Drive remediation efforts for access control gaps.
Assist projects as an advisor regarding AD and Entra.
Role-Based Access Control (RBAC) & Lifecycle Management
Design and refine RBAC models, access tiers, and least-privilege principles with internal stakeholders.
Work with application owners to map permissions and standardize access roles.
Support user M365 team in maintaining lifecycle processes (Joiner/Mover/Leaver) and automated provisioning workflows where available.
Lead efforts to identify, design, and deploy areas of automation within the RBAC and access lifecycle process.
Manage AD users, computers/assets and groups.
Manage Entra users, computers/assets and groups.
Support user and computer migrations during acquisitions and divestitures.
IAM Tool Ownership & Administration
Serve as primary owner/admin for one or more IAM platforms.
Manage configuration, integrations, workflows, AD and Entra platforms.
Coordinate enhancements, upgrades, and platform improvements.
Partner with application teams to onboard securely new systems into the IAM ecosystem.
Document and define provisioning rules and ensure consistent access patterns.
Provide technical support and guidance to business end-users and business application support team members.
Engineering & Cloud Infrastructure Support
Lead MFA/Passkey implementation and support SSO integrations and ensure alignment with security requirements.
Create and manage SSO applications in Entra using knowledge of SAML and Oauth.
Deploy and manage Active Directory Domain Controllers.
Deploy and manage DNS servers.
Create and manage internal/external certificates
Lead Automation of the digital certification process
Security Operations Support
Review and approve access requests for elevated or sensitive roles.
Help investigate access-related security incidents and identity threats.
Provide security guidance to internal teams for identity best practices.
What we’re looking for
EDUCATION AND EXPERIENCE (Minimum Qualifications)
Required: A bachelor’s degree in cybersecurity, computer science, computer engineering, or related field. Equivalent professional experience may be considered in lieu of formal degree
CORE COMPETENCIES
3-5 years experience in cybersecurity, IT, or similar discipline, with at least 2 years of hands-on identity security experience.
3+ years of hands-on experience administering Active Directory, including a strong understanding of its core components and services.
Hands-on experience with one or more IAM/IAG platforms.
Working knowledge of access governance, RBAC, provisioning, and directory services.
Experience onboarding applications into IAM platforms.
Understanding of SSO/MFA technologies, SAML/OIDC/OAuth protocols.
Familiarity with compliance frameworks: NIST, TISAX, SOX, ISO 27001.
Experience setting up a new domain from start to finish.
Experience working with DNS and common DNS record types.
Strong understanding of certificates and certificate creation.
PREFERRED KNOWLEDGE, SKILLS & ABILITIES
Certifications such as: CISSP, SC-300, CCSP, Security+, etc., highly preferred. – Microsoft certifications
Prior ownership of an IAM tool or identity governance program.
Hands-on knowledge of PAM, secrets management, or identity threat detection.
Portfolio examples (RBAC matrix, IAM workflows, automation scripts, etc.).
Familiarity with PowerShell scripting.
Excellent analytical and problem-solving skills.
Ability to work independently and collaboratively in a team environment.
Excellent communication and interpersonal skills.
Experience working in a ticket tracking system.
Self- motivated, reliable and able to prioritize and work independently.
Aptitude for understanding and troubleshooting technical problems.
Salary Range
- Internal Use Only: Salary
- Global Terms of Use and Privacy Statement
Carefully read the BorgWarner Privacy Policy before using this website. Your ability to access and use this website and apply for a job at BorgWarner are conditioned on your acceptance and compliance with these terms.
Please access the linked document by clicking here, select the geographical area where you are applying for employment, and review. Before submitting your application you will be asked to confirm your agreement with the terms.
Career Scam Disclaimer: BorgWarner makes no representations or guarantees regarding employment opportunities listed on any third-party website. To protect against career scams, job applicants should take the necessary precautions when interviewing for and accepting employment positions allegedly offered by BorgWarner. Applicants should never provide their national ID numbers, birth dates, credit card numbers, bank account information or other private information when communicating with prospective employers or responding to employment opportunities online. Job applicants are invited to contact BorgWarner through BorgWarner’s website to verify the authenticity of any employment opportunities.
