Senior Systems Engineer - Identity and Access Management

Electronic Arts (EA); Vancouver; Híbrido; CAD 122 000 - 171 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Vacation

Sick time

Top-up to EI/QPIP benefits

Extended health/dental/vision

Life insurance

Disability insurance

Retirement plan

Bonus potential

Resumo da oferta

Electronic Arts seeks an experienced Senior Systems Engineer with deep IAM and Windows systems administration expertise to join the Identity Security Operations and Delivery team in Vancouver. You will lead operations securing identities, enabling lifecycle management, and configuring single sign-on and provisioning across Entra ID and Okta.

The role focuses on passwordless authentication, Zero Trust posture, and complex system integrations within a global hybrid environment.

Qualificações

• 10+ years of IT experience, with 5+ years specializing in Identity & Access Management.
• Deep, hands-on expertise with Microsoft Entra ID - Conditional Access, app registrations, enterprise apps, dynamic groups, and identity governance features.
• Expert understanding of core IAM protocols: SAML 2.0, OpenID Connect, OAuth 2.0, and SCIM, as well as FIDO2.
• Practical experience implementing Zero Trust architectures and passwordless authentication.
• Scripting and automation ability (Python and/or PowerShell) using platform APIs.
• 3+ years experience administrating cloud infrastructure in AWS or Azure (IaC, Azure Virtual Desktop, Azure Hybrid AD join, AWS ALB and Route 53, IAM roles, KMS and Certificate manager).
• Experience administering Microsoft Windows Server / Active Directory, PKI and related technologies.
• Familiarity with enterprise networking concepts: firewalls, proxies, load balancers, VPN, TCP/IP.

Responsabilidades

• Lead operations and delivery of enterprise identity solutions, focusing on Entra ID and hybrid AD deployment.
• Design and deliver end-to-end SSO integrations using SAML 2.0, OIDC, and OAuth 2.0 across Entra ID and Okta.
• Implement and manage SCIM provisioning for SaaS apps, including licensing optimization and deprovisioning hygiene.
• Secure human and non-human identities, including service accounts and application secrets, via modern authentication protocols.
• Define and maintain RBAC, birth-right access, and nested group strategies.
• Automate identity operations using scripting and platform APIs (Python/PowerShell).
• Support a hybrid multi-forest Microsoft AD infrastructure, including Windows Server domain controllers and PKI; Entra administration.
• Maintain identity security posture by remediating over-privileged access and configuration drift.

Conhecimentos

Leadership

Team collaboration

Problem solving

Communication

Formação académica

Bachelor's degree in computer science or information technology

Microsoft SC-300 (Identity & Access Administrator)

Ferramentas

Microsoft Entra ID

SAML 2.0

OpenID Connect

OAuth 2.0

SCIM

Python

PowerShell

Microsoft Graph

Azure

AWS

Active Directory / Windows Server

PKI

Descrição da oferta de emprego

Description & Requirements

Electronic Arts creates next-level entertainment experiences that inspire players and fans around the world. Here, everyone is part of the story. Part of a community that connects across the globe. A place where creativity thrives, new perspectives are invited, and ideas matter. A team where everyone makes play happen.

Description & Requirements

Electronic Arts creates next-level entertainment experiences that inspire players and fans around the world. Here, everyone is part of the story. Part of a community that connects across the globe. A place where creativity thrives, new perspectives are invited, and ideas matter. A team where everyone makes play happen. Central Technology is the force multiplier, accelerating creative opportunity and progress at EA. We're a world-class community of technologists, innovators, strategists, and orchestrators transforming interactive entertainment. Together, we power the platforms, AI-driven tools, live services, and infrastructure that ensure global scale, secure player experiences, and unlock bold new possibilities. EA Information Technology (EAIT) powers the technology that connects our global workforce and supports every part of our business, from game development to marketing, publishing, security, and player experience. We create secure, scalable solutions that help teams collaborate and innovate in order to create better experiences for players worldwide.

Role Summary

We are looking for an experienced Senior Systems Engineer with deep expertise in both Identity & Access Management (IAM) and Windows Systems Administration to join our Identity Security Operations and Delivery team. You will lead the operations and delivery of enterprise identity solutions, with a primary focus on Microsoft Entra ID and our global hybrid Active Directory deployment. This is a senior operations role where you will secure human and non-human identities, enable enterprise identity lifecycle management, configure application single sign-on and provisioning, enable a Zero Trust security posture, support passwordless (FIDO2) authenticator deployment, and manage complex system integrations. You will be working closely with security, application, and infrastructure stakeholders, reporting to a manager based in Vancouver, Canada. You will be part of EA's IT Security team, within EAIT Global Infrastructure Services.

Location - Vancouver (Hybrid - 3 days)

Responsibilities

• You are a team player who will complete project deliverables, lead troubleshooting sessions, resolve escalated incidents from our support partners, fulfil service requests, implement changes, identify improvements, and prepare documentation.
• You will design and deliver end-to-end SSO integrations using SAML 2.0, OpenID Connect (OIDC), and OAuth 2.0 across Entra ID and Okta.
• You will Implement and manage SCIM provisioning for SaaS applications, including licensing optimization and deprovisioning hygiene.
• You will secure both human and non-human identities, including service accounts, Agentic AI and Application Secrets, through modern authentication protocols.
• You will define and maintain authorization models including role-based access control (RBAC), birth right application/groups and nested group strategies.
• You will automate identity operations and administration using scripting (eg. Python, PowerShell) and platform APIs (Microsoft Graph).
• You will support a hybrid multi-forest Microsoft AD infrastructure, including Windows Server domain controllers and PKI infrastructure, and Entra administration.
• You will maintain the identity security posture—identifying and remediating over-privileged access, orphaned accounts, and configuration drift.

Qualifications

• 10+ years of IT experience, with 5+ years specializing in Identity & Access Management.
• Deep, hands-on expertise with Microsoft Entra ID - Conditional Access, application registrations, enterprise applications, dynamic groups, and identity governance features.
• Expert understanding of core IAM protocols: SAML 2.0, OpenID Connect, OAuth 2.0, and SCIM, as well as FIDO2.
• Practical experience implementing Zero Trust architectures and passwordless/phishing-resistant authentication.
• Scripting and automation ability (Python and/or PowerShell) using platform APIs.
• 3+ years experience administrating cloud infrastructure in AWS or Azure. (Including familiarity with infrastructure as code, Azure Virtual Desktop, Azure Hybrid AD join, AWS ALB and Route 53, IAM roles, KMS and Certificate manager)
• Experience administrating Microsoft Windows Server / Active Directory, PKI and related technologies.
• Familiarity with enterprise networking concepts including firewalls, application proxies, load balancers, VPN, the TCP/IP protocol, and other enterprise network technologies.
• Bachelor's degree in computer science or information technology with Microsoft SC-300 (Identity & Access Administrator); or equivalent practical experience.

Pay Transparency - North America

Compensation And Benefits

The ranges listed below are what EA in good faith expects to pay applicants for this role in these locations at the time of this posting. If you reside in a different location, a recruiter will advise on the applicable range and benefits. Pay offered will be determined based on a number of relevant business and candidate factors (e.g. education, qualifications, certifications, experience, skills, geographic location, or business needs).

PAY RANGES

• British Columbia (depending on location e.g. Vancouver vs. Victoria) *$122,300 - $170,700 CAD

Pay is just one part of the overall compensation at EA.

• vacation (3 weeks per year to start)
• 10 days per year of sick time
• paid top-up to EI/QPIP benefits up to 100% of base salary when you welcome a new child (12 weeks for maternity, and 4 weeks for parental/adoption leave)
• extended health/dental/vision coverage
• life insurance
• disability insurance
• retirement plan to regular full-time employees.
• Certain roles may also be eligible for bonus and other incentive programs.

About Electronic Arts

We’re proud to have an extensive portfolio of games and experiences, locations around the world, and opportunities across EA. We value adaptability, resilience, creativity, and curiosity. From leadership that brings out your potential, to creating space for learning and experimenting, we empower you to do great work and pursue opportunities for growth. We adopt a holistic approach to our benefits programs, emphasizing physical, emotional, financial, career, and community wellness to support a balanced life. Our packages are tailored to meet local needs and may include healthcare coverage, mental well-being support, retirement savings, paid time off, family leaves, complimentary games, and more. We nurture environments where our teams can always bring their best to what they do.

Electronic Arts is an equal opportunity employer. All employment decisions are made without regard to race, color, national origin, ancestry, sex, gender, gender identity or expression, sexual orientation, age, genetic information, religion, disability, medical condition, pregnancy, marital status, family status, veteran status, or any other characteristic protected by law. We will also consider employment qualified applicants with criminal records in accordance with applicable law. EA also makes workplace accommodations for qualified individuals with disabilities as required by applicable law.