IAM Engineer: Secure Access & Automation

PowerSchool; Plano (TX); Hybrid; USD 110,000 - 160,000; Full time

Benefits offered by this job

Comprehensive Insurance

401(k) plan

Parental Leave

Discretionary Time Off (DTO)

Wellness Program

Tuition Reimbursement

Job summary

PowerSchool is seeking an Identity & Access Management Engineer to secure and simplify access across hybrid environments for our global workforce. You will own IAM capabilities across AD, Entra ID, SailPoint, and enterprise apps, implementing RBAC, MFA, SSO, and automated workflows to improve reliability and user experience.

You will partner with Security, Infrastructure, Compliance, HR, and application owners to translate access requirements into scalable solutions while documenting standards

Qualifications

• 3+ years of IAM, security engineering, systems engineering, or related field.
• Hands-on experience administering AD and Entra ID in an enterprise environment.
• Experience with identity lifecycle management (provisioning, deprovisioning, entitlements).
• Experience implementing or supporting SSO and federation (SAML/OAuth/OIDC).
• Experience configuring MFA, Conditional Access, and modern authentication controls.
• Familiarity with SailPoint Identity Security Cloud or IdentityIQ.
• Experience with RBAC, privileged access, access certifications, and governance principles.
• Scripting with PowerShell / Bash to automate IAM tasks.

Responsibilities

• Administer and support IAM across AD/Entra ID and SaaS apps.
• Configure MFA, CA, passwordless, and related authentication technologies.
• Implement RBAC and entitlements; manage access governance controls.
• Onboard enterprise applications; manage federation, provisioning, and certificates.
• Troubleshoot authentication, provisioning, and directory synchronization issues.
• Build automation using PowerShell, Bash, Graph API, and REST APIs.
• Support access reviews, audits, and compliance activities.
• Collaborate with Security, Infrastructure, Compliance, HR, and teams to translate access needs into scalable solutions.

Skills

IAM engineering

Troubleshooting

Scripting (PowerShell/Bash)

Cross-functional collaboration

Identity governance

Tools

Microsoft Active Directory

Microsoft Entra ID

SailPoint Identity Security Cloud / IdentityIQ

Microsoft Entra Privileged Identity Management (PIM)

Microsoft Graph API / REST APIs

Job description

PowerSchool is seeking an Identity & Access Management Engineer to secure and simplify access across hybrid environments for our global workforce. You will own IAM capabilities across AD, Entra ID, SailPoint, and enterprise apps, implementing RBAC, MFA, SSO, and automated workflows to improve reliability and user experience.

You will partner with Security, Infrastructure, Compliance, HR, and application owners to translate access requirements into scalable solutions while documenting standards