Staff Identity Engineer architecting RadiantOne directory virtualization and provisioning for NBCUniversal’s media and entertainment business. Driving enterprise IAM integrations, migrations, automation, and technical direction.
Responsibilities
Design, deploy, and tune Identity Fabric environments, including replication topology, ACIs, high-availability configuration, and enterprise-scale performance optimization
Design identity provisioning workflows and develop and debug bespoke custom connectors
Lead directory consolidation, migration, and hybrid identity initiatives involving multi-forest AD and Azure AD/Entra integration
Serve as technical escalation point for production issues involving directory replication, provisioning failures, and identity correlation conflicts
Drive root cause analysis and durable fixes
Partner with IAM governance, security architecture, and application teams to align directory and provisioning capabilities with broader identity strategy
Set technical direction and best practices for directory and provisioning engineering
Mentor senior and mid-level engineers
Build Python and PowerShell automation and tooling to reduce manual operational overhead and improve reliability
Document architecture decisions, design tradeoffs, and operational runbooks
Evaluate and influence roadmap decisions for the directory and provisioning technology stack
Requirements
Bachelor's degree in Computer Science, Information Security, or related field, or equivalent work experience
8+ years of hands-on experience in enterprise Identity and Access Management, with a concentration in identity provisioning and directory services
Hands-on production experience with Radiant Logic RadiantOne, including virtual directory design and identity correlation/aggregation
Hands-on production experience with Ping Directory or PingDirectoryProxy, including replication and performance tuning
Deep working knowledge of LDAP/LDAPS fundamentals: schema design, referrals, and replication conflict resolution
Experience designing and building provisioning workflows and connectors, including SCIM, JIT, and custom connector development
Scripting experience in JavaScript, Python and PowerShell for automation, tooling, and provisioning
Ability to make and articulate architectural tradeoffs and set technical direction for other engineers
Ability to work effectively in a remote-first team environment
Experience with SailPoint IdentityIQ or other IGA platforms and collaborating with governance teams
Experience with hybrid identity architectures, Azure AD/Entra ID, and multi-forest Active Directory environments
Exposure to PAM boundaries, service account lifecycle, and privileged directory access
Experience leading directory consolidation or large-scale migration projects
Prior experience mentoring engineers or informally setting technical direction across a team
Lead protection and control engineer designing utility and industrial substation systems for GE Vernova’s power - grid business. Delivering P&C engineering, estimates, reviews, and commissioning support.
Lead protection and control engineer designing utility and industrial substations for GE Vernova’s grid - solutions business. Delivering P&C, SCADA, estimates, calculations, and commissioning support.
Consultant Vibration Engineer solving complex vibration, fatigue, transient, and integrity problems for Wood’s energy and materials clients. Delivering computational analyses, field studies, reports, and client - facing consulting.
Staff Identity Engineer architecting RadiantOne provisioning and directory services for NBCUniversal’s global media and entertainment portfolio. Leading identity integrations, automation, migrations, and engineering direction.
Forward Deployed Engineer building full - stack, AI - driven aviation software for IFS Aerospace & Defense customers. Embedding at customer sites and integrating enterprise systems into mission - ready operations.
Forward Deployed Engineer building AI - enhanced payment integrations for SaaS partners at Constellation Payments. Designing APIs, automation, and reusable delivery assets.
Water resources engineer modeling water systems and supporting permitting for Ensero’s mining and industrial environmental consulting projects. Developing models, reports, and regulatory solutions across Canada.
Junior Geological Engineer supporting field investigations, geological mapping, and geotechnical analyses. Contributing to infrastructure projects at AtkinsRéalis, a global engineering services organization.
Electrical I&C Engineer designing instrumentation, control, and electrical systems for nuclear and regulated industrial projects. Supporting testing, commissioning, and field implementation.