Identity Access Management Engineer
PowerSchool Group LLC28 days ago
Dallas, TX, USAMid Level
Responsibilities
- Administer and support Microsoft Active Directory and Microsoft Entra ID across hybrid enterprise environments.
- Manage joiner, mover, and leaver identity lifecycle processes, including provisioning, deprovisioning, access requests, birthright access, and entitlement changes.
- Implement RBAC, least privilege, separation of duties, access certifications, and other identity governance controls.
- Configure and support MFA, Conditional Access, passwordless authentication, passkeys, FIDO2, and related authentication technologies.
- Implement and support SSO and federation integrations using SAML 2.0, OAuth 2.0, OpenID Connect, SCIM, and related standards.
- Onboard enterprise and SaaS applications through registrations, federation, provisioning, certificates, claims, permissions, and access models.
- Administer Microsoft Entra PIM and support privileged access controls.
- Support SailPoint identity governance workflows, access requests, entitlement management, access certifications, and application onboarding.
- Troubleshoot authentication, federation, provisioning, directory synchronization, entitlement, and access issues across cloud and on-premises environments.
- Build automation with PowerShell, Bash, Microsoft Graph API, REST APIs, and other tools to improve reliability and reduce manual administration.
- Monitor IAM platforms and authentication services and support identity-related incident investigation and response.
- Support access reviews, audits, compliance activities, documentation, technical evidence, and remediation records.
- Partner with security, infrastructure, compliance, HR, application owners, and business teams to deliver secure identity solutions.
- Maintain technical documentation, diagrams, standards, runbooks, and operating procedures.
- Provide backup support for Microsoft 365 identity-related administration, including Exchange Online and SharePoint.
Requirements
- At least 3 years of experience in identity and access management, security engineering, systems engineering, or a related technical field, or an equivalent combination of education and experience.
- Hands-on enterprise experience administering Microsoft Active Directory and Microsoft Entra ID.
- Experience with identity lifecycle management, provisioning, deprovisioning, access requests, entitlements, and joiner/mover/leaver processes.
- Experience implementing or supporting SSO and federation with SAML, OAuth, and OpenID Connect.
- Experience configuring MFA, Conditional Access, and modern authentication controls.
- Working knowledge of identity governance and administration platforms such as SailPoint Identity Security Cloud or IdentityIQ.
- Experience with RBAC, least privilege, privileged access, access certification, and identity governance principles.
- Experience using PowerShell or Bash scripting to automate identity administration and troubleshoot IAM processes.
- Strong troubleshooting and root-cause analysis skills across complex cloud and hybrid identity environments.
- Ability to communicate technical concepts clearly and work effectively with security, infrastructure, application, compliance, and business teams.
- Preferred experience with Microsoft Graph API, REST APIs, JSON, Python, or other scripting and integration technologies.
- Preferred experience with Microsoft Entra PIM or enterprise PAM platforms, SCIM provisioning, API-based application integrations, SailPoint application onboarding, Microsoft 365, cloud platforms, or enterprise SaaS applications.
- Familiarity with NIST, ISO 27001, SOC 2, or SOX frameworks and experience with security incidents involving compromised identities, credentials, authentication, or privileged access.
- Microsoft SC-300, SailPoint, Security+, SSCP, CISSP, or another relevant identity/security certification is preferred.
Benefits
- Comprehensive medical, dental, vision, pharmacy, life insurance, and AD&D coverage.
- Flexible Spending Accounts and Health Savings Accounts.
- Short-Term Disability and Long-Term Disability coverage.
- Comprehensive 401(k) plan.
- Generous parental leave.
- Unrestricted paid time off through the Discretionary Time Off program.
- Wellness program including ClassPass and an Employee Assistance Program.
- Tuition reimbursement.
- Optional pet insurance, identity theft protection, student debt repayment, and prepaid legal coverage.
About PowerSchool Group LLC
PowerSchool builds cloud software for K-12 school districts, spanning student information, learning management (Schoology), enrollment, assessments, analytics, special education, and HR/finance. It sells these products as SaaS to districts and state agencies to manage data, instruction, and operations across schools and families. Headquartered in Folsom, CA, PowerSchool supports over 60 million students at more than 18,000 customers, including over 90 of the 100 largest U.S. districts by enrollment.