5 hours ago
Base Salary
$125k - $155k/yr
Responsibilities
- Design, deploy, tune, and optimize RadiantOne Identity Fabric environments, including replication topology, ACIs, high availability, and enterprise-scale performance.
- Develop and debug provisioning workflows, custom connectors, and bespoke identity integrations.
- Lead directory consolidation, migration, and hybrid identity initiatives involving multi-forest Active Directory and Azure AD/Entra.
- Serve as a technical escalation point for directory replication, provisioning failures, and identity correlation issues, driving root-cause analysis and durable fixes.
- Partner with IAM governance, security architecture, and application teams to align directory and provisioning capabilities with identity strategy.
- Set technical direction and engineering best practices while mentoring senior and mid-level engineers.
- Build automation and tooling with JavaScript, Python, and PowerShell to improve provisioning and directory-service reliability.
- Document architecture decisions, design tradeoffs, and operational runbooks, and influence technology-roadmap decisions.
Requirements
- Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent work experience.
- 8+ years of hands-on enterprise Identity and Access Management experience focused on identity provisioning and directory services.
- Hands-on production experience with Radiant Logic RadiantOne, including virtual directory design and identity correlation or aggregation.
- Hands-on production experience with Ping Directory or PingDirectoryProxy, including replication and performance tuning.
- Deep knowledge of LDAP/LDAPS fundamentals, schema design, referrals, and replication conflict resolution.
- Experience designing provisioning workflows and connectors using SCIM, JIT, and custom connector development.
- Scripting experience in JavaScript, Python, and PowerShell for automation, tooling, and provisioning.
- Ability to articulate architectural tradeoffs, set technical direction, mentor engineers, and work effectively in a remote-first environment.
- Preferred experience with SailPoint IdentityIQ or other IGA platforms, hybrid Azure AD/Entra identity architectures, multi-forest Active Directory, PAM boundaries, service-account lifecycle, privileged directory access, and large-scale directory consolidation or migration.
Benefits
- Fully remote position, generally performed from the employee’s residence.
- Company-sponsored medical, dental, and vision insurance.
- 401(k), paid leave, tuition reimbursement, discounts, and other perks.
- Bonus eligible.
- Applications are accepted on an ongoing basis.
Tech Stack
Categories
About NBC
NBCUniversal is a global media and entertainment company that produces and distributes film, television, news, sports, and streaming content for consumer audiences and advertisers. Its portfolio includes NBC, Telemundo, Universal Pictures, DreamWorks Animation, and Peacock, and it also operates Universal theme parks and consumer products licensing. Formed in 2004 and headquartered in New York City, it is a subsidiary of Comcast.