Azure Specialist - Identity and Access Engineering

About the role

McDonald's Global Technology is looking for a FullStack Software Azure Engineer or Azure Specialist on its Identity and Access Engineering team in Mexico City. The role contributes to the architectural transformation of a custom IAM solution from a monolithic structure to a modern microservices-based architecture, supporting access governance, role-based access control (RBAC) and separation of duties (SOD). It is a strategic, hands-on position requiring collaboration across engineering, security and business teams.

Key responsibilities

• Assist in migrating the IAM application from monolithic to microservices architecture, ensuring scalability, resilience and performance.
• Contribute to the design, implementation and maintenance of the IAM solution, including access governance, RBAC and SOD.
• Help integrate Saviynt APIs into the IAM platform to improve identity governance and automation.
• Design and implement cloud-native solutions with Azure services such as AKS, Azure Functions, Logic Apps, Event Grid, Service Bus and API Management.
• Document architecture standards, patterns and best practices for microservices, API design and cloud infrastructure.
• Work with software engineers, DevSecOps and cybersecurity teams on secure, compliant solutions.
• Evaluate and recommend new Azure services and IAM technologies.
• Take part in secure CI/CD pipelines with GitHub Actions, Azure DevOps and Jenkins, and automate infrastructure with Terraform and ARM templates.
• Integrate security tools (SAST, DAST, SCA such as Snyk) into the SDLC, and support containerization with Docker and Kubernetes.
• Troubleshoot complex architectural and integration issues and stay current with IAM and DevSecOps tools.

Required profile

• 5+ years of experience in software architecture and development, with at least 2 years focused on Azure cloud solutions.
• Proven experience collaborating on the design and migration of applications to a microservices architecture.
• Experience integrating third-party IAM platforms such as Saviynt, SailPoint or Okta via APIs.
• Preferred: working knowledge of IAM protocols (OAuth 2.0, OpenID Connect, SAML, SCIM, LDAP), cybersecurity principles and risk management, and certifications such as Azure Solutions Architect Expert, Azure Security Engineer Associate, Microsoft Identity and Access Administrator Associate or CISSP.

Required skills

• Azure services: AKS, Azure Functions, Logic Apps, Event Grid, Service Bus, Azure Data Factory, Azure Cosmos DB, API Management, Azure AD and Entra ID.
• .NET Core/.NET Framework, C#, SQL and NoSQL databases.
• Docker and Kubernetes, Git flow, blue-green and canary deployments.
• CI/CD tools: GitHub Actions, Azure DevOps, Jenkins.