Identity & Access Engineer — Secure Access & Automation

PowerSchool Group LLC; Dallas (TX); Presencial; USD 110.000 - 150.000; Jornada completa

Descripción de la vacante

PowerSchool Group LLC is seeking an Identity & Access Management Engineer to secure and streamline access across our hybrid enterprise. You will own IAM capabilities, integrating Microsoft Entra ID, Active Directory, SailPoint, and enterprise apps while automating processes to reduce manual work.

In this hands‑on role you will implement MFA, SSO, RBAC, and privileged access controls, troubleshoot complex identity issues, and collaborate with Security, Infra, Compliance, HR, and app owners to

Formación

• 3+ years in identity and access management or related field.
• Hands‑on experience administering Microsoft Active Directory and Microsoft Entra ID in an enterprise environment.
• Experience with identity lifecycle: provisioning, deprovisioning, access requests, entitlements, joiner/mover/leaver processes.
• Experience implementing or supporting SSO and federation using SAML, OAuth, and OIDC.
• Experience configuring MFA, Conditional Access, and modern authentication controls.
• Working knowledge of identity governance and administration platforms such as SailPoint Identity Security Cloud or IdentityIQ.
• Experience with RBAC, least privilege, privileged access, access certification, and identity governance principles.
• Experience using PowerShell / Bash scripting to automate identity administration and troubleshoot IAM processes.
• Strong troubleshooting and root‑cause analysis skills across complex cloud and hybrid identity environments.
• Ability to communicate technical concepts clearly and work effectively with security, infrastructure, application, compliance, and business teams.

Responsabilidades

• Administer AD and Entra ID across hybrid environments.
• Manage identity lifecycle events: provisioning, deprovisioning, entitlements.
• Implement RBAC, least privilege, and identity governance controls.
• Configure MFA, CA, passwordless auth, passkeys, and related authentication technologies.
• Enable SSO and federation using SAML, OAuth, OIDC, SCIM.
• Onboard applications into PowerSchool’s identity ecosystem.
• Administer PIM and support privileged access controls.
• Support SailPoint governance: provisioning, access requests, certifications.
• Troubleshoot authentication, federation, provisioning across cloud/hybrid.
• Automate IAM with PowerShell, Bash, Graph API, REST, etc.
• Monitor IAM platforms for availability and security events.
• Document controls, runbooks, and procedures.
• Collaborate with Security, Infra, Compliance, HR, and app owners to secure scalable solutions.
• Provide backup support for Microsoft 365 identity administration.

Conocimientos

Active Directory

Entra ID

RBAC

MFA & CA

SSO & Federation

SailPoint

PowerShell

Bash

Graph API

SCIM provisioning

PIM / PAM

Troubleshooting

Communication

Herramientas

Microsoft Entra ID

Microsoft Graph API

SailPoint Identity Security Cloud

PowerShell

Bash

Descripción del empleo

PowerSchool Group LLC is seeking an Identity & Access Management Engineer to secure and streamline access across our hybrid enterprise. You will own IAM capabilities, integrating Microsoft Entra ID, Active Directory, SailPoint, and enterprise apps while automating processes to reduce manual work.

In this hands‑on role you will implement MFA, SSO, RBAC, and privileged access controls, troubleshoot complex identity issues, and collaborate with Security, Infra, Compliance, HR, and app owners to