About Us:

CDK Global is a leading provider of cloud-based software to dealerships and Original Equipment Manufacturers (“OEMs”) across automotive and related industries. The Company’s cloud-based, software as a service (“SaaS”) platform enables dealerships to manage their end-to-end business operations including the acquisition, sale, financing, insuring, repair, and maintenance of vehicles. By automating and streamlining critical workflows, the integrated platform of modern solutions enables dealers to sell and service more vehicles by creating simple and convenient experiences for customers and improves their financial and operational performance.

Position Summary:

The Lead Identity Security Engineer is accountable for securing identities and provisioning the right level of access for our user identities, machine identities, and admin identities.

Position Responsibilities: 

1. Leadership & Strategy:

· Exemplify security principles and culture

· Develop and implement and robust identity security strategy

· Effectively partner across security, technology, and business teams

· Provide technical and thought leadership for securing customer, user, administrator, and machine identities at CDK global

· Develop effective Identity security metrics and use them to drive improvements

2. Identity Security Standards:

· Develop and continuously improve Identity and Access Governance and Privileged Access Management security standards and guidelines in alignment with risk and compliance requirements

· Develop and continuously improve machine identity and secrets management standards and guidelines in alignment with risk and compliance requirements

· Measure and report on CDK’s compliance with the above defined security standards

· Drive adoption of the security standards through close partnership with technology teams, leading design and implementation of new technologies, and building new or improving existing processes

3. Identity Security Architecture and Engineering:

· Architect, design, build, implement, and operate IAM, PAM, IGA, and Secrets Management solutions

· Architect, design, and consult on secure machine identity and secrets management architectural patterns to be used in modern applications and cloud environments

· Develop and implement effective privileged access architecture and strategies to reduce security risk

· Develop and implement an IGA strategy to automatically provision the right level of access to our users, maintain the right level of access through organizational and technology changes, and de-provision accounts at the right time

· Collaborate with product and technology teams on developing and implementing effective secrets management solutions

4. Identity Security Operations:

· Develop and operate processes for user account lifecycle management, secrets management, and email/collaboration security.

· Collaborate with Security Operations team to assure effective security monitoring and response capabilities for CDK identity and end user technologies

· Provide 24x7 tier 2/3 support for identity and end user security technologies

Required Qualifications:

• Bachelor’s degree in Computer Science or Information Security, or an equivalent experience

• Minimum of 6 years in identity and access management

• Strong background in privileged access management in hybrid on-premises/cloud environments, preferably in a technology/SaaS organization.

• Extensive experience in user lifecycle automation and access provisioning/validation automation – using modern IGA tools

• Experience collaborating with product and platform teams on secrets management to support application development and deployment.