5 hours ago
Base Salary
$125k - $155k/yr
Responsibilities
- Design, deploy, tune, and optimize RadiantOne Identity Fabric environments, including replication topology, ACIs, high availability, and enterprise-scale performance.
- Build and debug identity provisioning workflows, custom connectors, and bespoke integrations.
- Lead directory consolidation, migration, and hybrid identity initiatives involving multi-forest Active Directory and Azure AD/Entra integration.
- Resolve complex production issues involving directory replication, provisioning failures, and identity correlation conflicts through root cause analysis and durable fixes.
- Partner with IAM governance, security architecture, and application teams to align directory and provisioning capabilities with identity strategy.
- Set technical direction and engineering best practices while mentoring senior and mid-level engineers.
- Build Python and PowerShell automation and tooling to reduce operational overhead and improve provisioning and directory-service reliability.
- Document architecture decisions, design tradeoffs, and operational runbooks, and influence technology-stack roadmap decisions.
Requirements
- Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent work experience.
- At least 8 years of hands-on enterprise Identity and Access Management experience focused on identity provisioning and directory services.
- Hands-on production experience with Radiant Logic RadiantOne, including virtual directory design and identity correlation or aggregation.
- Hands-on production experience with Ping Directory or PingDirectoryProxy, including replication and performance tuning.
- Deep knowledge of LDAP/LDAPS fundamentals, schema design, referrals, and replication conflict resolution.
- Experience designing provisioning workflows and connectors using SCIM, JIT, and custom connector development.
- Scripting experience with JavaScript, Python, and PowerShell.
- Ability to articulate architectural tradeoffs, set technical direction, mentor engineers, and work effectively in a remote-first environment.
- Preferred qualifications include SailPoint IdentityIQ or other IGA-platform experience, Azure AD/Entra ID and multi-forest Active Directory experience, security architecture knowledge, directory consolidation or migration leadership, and prior mentoring or technical-direction experience.
Benefits
- Fully remote position, generally performed from the employee’s residence.
- Company-sponsored medical, dental, and vision insurance.
- 401(k), paid leave, tuition reimbursement, discounts, and other perks.
- External candidates may be required to attend an in-person interview at an NBCUniversal location before a hiring decision.
Tech Stack
Categories
About NBC
NBCUniversal is a global media and entertainment company that produces and distributes film, television, news, sports, and streaming content for consumer audiences and advertisers. Its portfolio includes NBC, Telemundo, Universal Pictures, DreamWorks Animation, and Peacock, and it also operates Universal theme parks and consumer products licensing. Formed in 2004 and headquartered in New York City, it is a subsidiary of Comcast.