Staff Identity Engineer – Radiant One

Posted 10 hours ago

Apply Now

Resume Score

Check how well your resume matches this job before you apply.

Sign in to check score

About the role

  • Staff Identity Engineer architecting RadiantOne provisioning and directory services for NBCUniversal’s global media and entertainment portfolio. Leading identity integrations, automation, migrations, and engineering direction.

Responsibilities

  • Design, deploy, and tune Identity Fabric environments, including replication topology, ACIs, high-availability configuration, and enterprise-scale performance optimization
  • Design identity provisioning workflows and develop custom connectors, including bespoke integrations beyond out-of-the-box configuration
  • Lead directory consolidation, migration, and hybrid identity initiatives involving multi-forest AD and Azure AD/Entra integration
  • Serve as technical escalation point for production issues involving directory replication, provisioning failures, and identity correlation conflicts
  • Drive root cause analysis and durable fixes
  • Partner with IAM governance, security architecture, and application teams to align directory and provisioning capabilities with broader identity strategy
  • Set technical direction and best practices for directory and provisioning engineering
  • Mentor senior and mid-level engineers
  • Build Python and PowerShell automation and tooling to reduce manual operational overhead and improve reliability
  • Document architecture decisions, design tradeoffs, and operational runbooks
  • Evaluate and influence roadmap decisions for the directory and provisioning technology stack

Requirements

  • Bachelor's degree in Computer Science, Information Security, or related field, or equivalent work experience
  • 8+ years of hands-on experience in enterprise Identity and Access Management, with a concentration in identity provisioning and directory services
  • Hands-on production experience with Radiant Logic RadiantOne, including virtual directory design and identity correlation/aggregation
  • Hands-on production experience with Ping Directory or PingDirectoryProxy, including replication and performance tuning
  • Deep working knowledge of LDAP/LDAPS fundamentals, including schema design, referrals, and replication conflict resolution
  • Experience designing and building provisioning workflows and connectors, including SCIM, JIT, and custom connector development
  • Scripting experience in JavaScript, Python and PowerShell for automation, tooling, and provisioning
  • Ability to make and articulate architectural tradeoffs and set technical direction for other engineers
  • Ability to work effectively in a remote-first team environment
  • Experience with SailPoint IdentityIQ or other IGA platforms and collaborating with governance teams
  • Experience with hybrid identity architectures, Azure AD/Entra ID, and multi-forest Active Directory environments
  • Exposure to PAM boundaries, service account lifecycle, and privileged directory access
  • Experience leading directory consolidation or large-scale migration projects
  • Prior experience mentoring engineers or informally setting technical direction across a team

Benefits

  • Medical, dental and vision insurance
  • 401(k)
  • Paid leave
  • Tuition reimbursement
  • Variety of other discounts and perks
  • Bonus eligibility

Job title

Job type

Full Time

Experience level

Lead

Salary

$125,000 - $155,000 per year

Degree requirement

Bachelor's Degree

Tech skills

AzureJavaScriptPython

Location requirements

RemoteCanada

Report this job

Found something wrong with the page? Please let us know by submitting a report below.