Job Description

As a Senior Full‑Stack Software Azure Engineer or Azure Architect on our Identity and Access Engineering team, you need a strong background in systems design and architecture to drive development of scalable, resilient, and efficient applications.

The ideal candidate will lead the architectural transformation of our custom IAM solution from a monolithic structure to a modern microservices‑based architecture. This includes deep expertise in Azure cloud services, microservices design, and API integration, particularly with Saviynt, and a key role in designing scalable IAM solutions that support access governance, role‑based access control (RBAC), and separation of duties (SOD).

This is a strategic and hands‑on role that requires strong technical leadership, architectural vision, and the ability to collaborate across engineering, security, and business teams. It offers a phenomenal opportunity to continue to evolve and improve the general identity and access management platform at the world’s largest restaurant company.

Responsibilities

- Lead the migration of our IAM application from monolithic architecture to microservices, ensuring scalability, resilience, and performance.
- Design, implement, and maintain scalable IAM solutions, including access governance, RBAC, and SOD.
- Architect and oversee the integration of Saviynt APIs into our IAM platform to enhance identity governance and automation capabilities.
- Design and implement cloud‑native solutions using Azure services including AKS, Azure Functions, Logic Apps, Event Grid, Service Bus, and API Management.
- Define and document architecture standards, patterns, and best practices for microservices, API design, and cloud infrastructure.
- Collaborate with software engineers, DevSecOps, and cybersecurity teams to ensure secure, compliant, and efficient solutions.
- Provide technical leadership and mentorship to development teams.




- Evaluate and recommend new Azure services and IAM technologies to improve platform capabilities.
- Design, implement, and maintain secure CI/CD pipelines using GitHub Actions, Azure DevOps, and Jenkins.
- Automate infrastructure provisioning using Terraform and ARM templates.
- Integrate security tools into the SDLC, including SAST, DAST, and SCA (e.g., Snyk).
- Manage secrets securely using Azure Key Vault and enforce secure coding practices.
- Support containerization using Docker and orchestration with Kubernetes.
- Troubleshoot complex architectural and integration issues across distributed systems.
- Stay current with emerging IAM technologies, Azure services, and DevSecOps tools.

Qualifications

- 8+ years of experience in software architecture and development, with at least 3 years focused on Azure cloud solutions.
- Proven experience designing and migrating applications to microservices architecture.
- Experience with containerization and orchestration using Docker and Kubernetes.
- Experience integrating third‑party IAM platforms such as Saviynt, SailPoint, or Okta via APIs.
- Experience with CI/CD tools: GitHub Actions, Azure DevOps, Jenkins.
- Experience with Git flow, branching strategies, and repository security configurations.
- Experience with deployment strategies like Blue‑Green and Canary.
- Strong understanding of application security practices (Snyk, SAST, DAST, and SCA).
- Excellent communication and stakeholder management skills.

Preferred Qualifications

- Deep understanding of IAM protocols and standards: OAuth 2.0, OpenID Connect, SAML, SCIM, LDAP.
- Relevant certifications such as Azure Solutions Architect Expert, Azure Security Engineer Associate, Microsoft Identity and Access Administrator Associate, CISSP are highly desirable.
- Experience with cybersecurity principles and best practices, including risk management, access controls, and secure coding principles.

Job Location

(Location details to be provided)

#J-18808-Ljbffr

📌 Azure Engineer III (Ciudad de México)
🏢 McDonald's
📍 Ciudad de México