IAM Engineer: Secure Access & Automation

PowerSchool; Dallas, Northern (TX, KY); Hybrid; USD 110,000 - 150,000; Full time

Benefits offered by this job

Comprehensive Insurance Coverage

Flexible Spending Accounts

Discretionary Time Off

Wellness Program

Tuition Reimbursement

Pet Insurance

Job summary

PowerSchool is seeking an Identity & Access Management Engineer to build, secure, and support the identity services that connect employees and partners. You will own IAM capabilities across AD, Entra ID, SailPoint, and privileged access, implementing secure access controls and automating processes for a reliable user experience.

The role emphasizes hands-on engineering for protecting the organization while ensuring a smooth authentication experience.

Qualifications

• 3+ years of IAM, security or related engineering experience.
• Hands-on with AD and Entra ID in an enterprise environment.
• Experience with provisioning, deprovisioning, entitlements and joiner/mover/leaver.
• Experience implementing or supporting SSO/federation (SAML, OAuth, OIDC).
• Experience configuring MFA, Conditional Access and modern auth controls.
• Knowledge of SailPoint or Identity governance platforms.
• Experience with RBAC, least privilege and privileged access concepts.
• Ability to script to automate IAM tasks and troubleshoot processes.

Responsibilities

• Administer and support AD and Entra ID across hybrid environments.
• Implement RBAC, least-privilege, and identity governance controls.
• Configure MFA, Conditional Access, and passwordless auth technologies.
• Onboard applications and support SSO/federation integrations.
• Automate identity tasks using PowerShell, Bash, and APIs.
• Troubleshoot authentication, provisioning, and directory sync issues.
• Support access reviews, audits, and compliance activities.
• Collaborate with Security, Infra, HR, and business teams to design IAM solutions.

Skills

Identity & Access Management

Security engineering

Scripting (PowerShell/Bash)

Troubleshooting

Communication

Hybrid/cloud identity

Tools

Microsoft Entra ID

SailPoint Identity Security Cloud

PowerShell

PIM (Privileged Identity Management)

Microsoft Graph API

Job description

PowerSchool is seeking an Identity & Access Management Engineer to build, secure, and support the identity services that connect employees and partners. You will own IAM capabilities across AD, Entra ID, SailPoint, and privileged access, implementing secure access controls and automating processes for a reliable user experience.

The role emphasizes hands-on engineering for protecting the organization while ensuring a smooth authentication experience.