Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted today

Senior Identity Engineer

ACE21 open roles

Where
Coppell, TX
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSenior Identity EngineerACE · Coppell, TX

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on ACE's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

8.1% of postings close within 7 days. Measured by our own scanner across the market. ACE postings stay open a median of 4 days.

Share of postings closed within
  1. 1.7%1 day
  2. 3.6%3 days
  3. 8.1%7 days
  4. 15.1%14 days
  5. 34.0%30 days
This job: posted today

ACE median: 4 days open

The posting

Senior Identity Engineer

As an Senior Identity Engineer focused on identity architecture and platform engineering within Auto Club Enterprises’ Enterprise Identity Engineering (EIE) team, you will research, design, engineer, integrate, and support secure identity capabilities across on-premises, cloud, and hybrid environments. You will provide hands-on technical leadership for complex identity initiatives and convert architecture into implemented, tested, monitored, and supportable solutions.

The role requires depth in enterprise directories and modern identity protocols, combined with practical engineering ability. You will strengthen platform resilience, reduce single-person dependencies, establish reusable architecture patterns, and advance identity capabilities for workforce, non-human, workload, and AI identities.

What You’ll Do

  • Design and engineer identity architectures for authentication, authorization, federation, identity lifecycle, governance, privileged access, secrets, MFA, directories, certificate services, and workload identity.
  • Lead research, options analysis, proofs-of-concept, technical design, security review, and implementation planning for new identity products and capabilities.
  • Engineer Active Directory and Entra ID solutions across multi-site, multi-forest, cloud, and hybrid environments, including Entra Connect synchronization and heterogeneous authentication.
  • Design integrations using SAML 2.0, OAuth 2.0, OpenID Connect, LDAP, SCIM, Kerberos, API-based provisioning, certificates, and secure secrets patterns.
  • Improve identity resilience through recovery architecture, threat detection, monitoring, failure-mode analysis, disaster recovery, testing, and operational readiness.
  • Engineer and integrate PKI, certificate lifecycle, HSM, MFA, PAM, secrets-management, and federation-agent technologies.
  • Define patterns for non-human identity, workload identity, service principals, machine credentials, AI agents, MCP integrations, authorization, auditability, and governance.
  • Partner with developers and automation engineers to translate designs into code, pipelines, Infrastructure as Code, automated tests, monitoring, and production deployments.
  • Troubleshoot complex cross-platform identity issues through authentication-flow analysis, packet traces, logs, telemetry, and root-cause analysis.
  • Create reference architectures, segmentation diagrams, design decisions, standards, runbooks, recovery procedures, test evidence, and handover documentation.
  • Mentor engineers, conduct design reviews, lead technical work across teams, and provide remote after-hours support during major outage conditions.

What You’ll Need

  • Demonstrated experience designing and implementing enterprise identity solutions, not solely administering existing products.
  • Deep knowledge of Active Directory in large multi-site or multi-forest environments, including authentication, Kerberos, trusts, directory dependencies, recovery considerations, and Windows and non-Windows interoperability.
  • Strong experience with Entra ID, Entra Connect synchronization, hybrid identity, federation, conditional access concepts, and cloud identity integration.
  • Strong knowledge of SAML, OAuth, OpenID Connect, LDAP, SCIM, MFA, PKI, RBAC, least privilege, secrets management, and privileged access patterns.
  • Experience creating architecture diagrams, design records, integration patterns, failure-mode analysis, recovery plans, implementation roadmaps, and operational handoff documentation.
  • Working development and automation skills in Python or PowerShell, plus experience with APIs, Git, CI/CD, automated testing, and Infrastructure as Code or configuration management.
  • Experience engineering highly available, fault-tolerant, monitored, and recoverable enterprise services.
  • Ability to independently research an unfamiliar technology, build or guide a proof-of-concept, assess security and business tradeoffs, and recommend a scalable approach.
  • Advanced troubleshooting skills using logs, telemetry, protocol traces, packet analysis, and cross-platform dependency mapping.
  • Excellent communication and the ability to lead technical decisions and implementation across Architecture, Cybersecurity, Infrastructure, Cloud, Application Development, and business teams.

Preferred Experience

  • Semperis Directory Services Protector, Active Directory Forest Recovery, Lightning Intelligence, or comparable identity threat detection and recovery technologies.
  • Okta agents or comparable federation, directory integration, and cloud identity provider components.
  • Microsoft PKI, Keyfactor, DigiCert Trust Lifecycle Manager, certificate orchestration, Thales Luna HSM, or comparable certificate and cryptographic platforms.
  • CyberArk PAM, CyberArk secrets management, Conjur, or comparable privileged access and non-human credential platforms.
  • Thales SafeNet Trusted Access, CipherTrust, or comparable MFA and key-management platforms.
  • Infoblox DNS, F5 GTM, AD LDS, ManageEngine identity administration and audit products, or comparable enterprise infrastructure services.
  • Workload identity, non-human identity governance, AI agent identity, MCP integration security, authorization policy, secrets, and auditability.
  • Splunk, Wireshark, ExtraHop, or comparable diagnostic and observability tools.
  • Zero Trust architecture, cloud-native identity in Microsoft Azure or AWS, and secure application integration patterns.

#LI-LD1

Remarkable benefits:

• Health coverage for medical, dental, vision

• 401(K) saving plans with company match AND Pension

• Tuition assistance

• Floating holidays and PTO for community volunteer programs

• Paid parental leave

• Wellness programs

• Employee discounts (membership, insurance,

travel, entertainment, services and more!)

Auto Club Enterprises is the largest club within the national AAA federation. We have nearly 17,000 employees in 24 states helping more than 18 million members. The strength of our organization is our employees. Bringing together and supporting different cultures, backgrounds, personalities, and strengths creates a team capable of delivering legendary, lifetime service to our members. When we embrace our diversity – we win. All of Us! With our national brand recognition, long-standing reputation since 1900, and constantly growing membership, we are seeking career-minded, service-driven professionals to join our team.

"Through dedicated employees we proudly deliver legendary service and beneficial products that provide members peace of mind and value.”

AAA is an Equal Opportunity Employer

Our organization participates in E-Verify

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against ACE's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on ACE's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    ACE's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.