Azure Engineer III - Identity and Access

About the role

McDonald's Global Technology is looking for a Senior FullStack Software Azure Engineer or Azure Architect on its Identity and Access Engineering team in Mexico City. The role leads the architectural transformation of a custom IAM solution from a monolithic structure to a modern microservices-based architecture, with expertise in Azure cloud services, microservices design and API integration, particularly with Saviynt. It is a strategic, hands-on position requiring collaboration across engineering, security and business teams.

Key responsibilities

• Lead the migration of the IAM application from monolithic to microservices architecture, ensuring scalability, resilience and performance.
• Design, implement and maintain scalable IAM solutions covering access governance, RBAC and separation of duties.
• Integrate Saviynt APIs into the IAM platform and build cloud-native solutions with Azure services such as AKS, Azure Functions, Logic Apps, Event Grid, Service Bus and API Management.
• Define and document architecture standards, patterns and best practices for microservices, API design and cloud infrastructure.
• Work with software engineers, DevSecOps and cybersecurity teams to deliver secure, compliant solutions.
• Mentor development teams and evaluate new Azure services and IAM technologies.
• Build secure CI/CD pipelines with GitHub Actions, Azure DevOps and Jenkins, automate infrastructure with Terraform and ARM templates, and integrate SAST, DAST and SCA tools.
• Use Azure Key Vault for secrets, Docker and Kubernetes for containers, and troubleshoot complex distributed system issues.

Required profile

• 8+ years of experience in software architecture and development, with at least 3 years focused on Azure cloud solutions.
• Proven experience designing and migrating applications to microservices.
• Experience integrating third-party IAM platforms such as Saviynt, SailPoint or Okta via APIs.
• Preferred: knowledge of IAM protocols (OAuth 2.0, OpenID Connect, SAML, SCIM, LDAP), certifications such as Azure Solutions Architect Expert, Azure Security Engineer Associate, Microsoft Identity and Access Administrator Associate or CISSP, and cybersecurity best practices.

Required skills

• Azure: AKS, Azure Functions, Logic Apps, Event Grid, Service Bus, Azure Data Factory, Cosmos DB, API Management, Azure AD and Entra ID.
• .NET Core/.NET Framework, C#, SQL and NoSQL databases.
• Docker and Kubernetes; CI/CD tools GitHub Actions, Azure DevOps and Jenkins.
• Git flow, blue-green and canary deployments, and application security tools such as Snyk.