Workforce IAM Engineer
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Workforce IAM Engineer advancing College Board’s education-focused nonprofit workforce identity security. Building RBAC, Entra ID, Okta, password-management, and hardware-key solutions.
Responsibilities:
- Build, test, deploy, and maintain persona-based RBAC roles and access policies
- Develop scalable application logic and automations
- Build and maintain Microsoft Entra ID and Okta integrations and workflows, including application onboarding and SSO/SCIM configuration
- Automate role assignment, access provisioning, and reporting with scripts and tooling such as PowerShell
- Maintain RBAC roles as organizational structures, entitlements, and applications change
- Write, test, and document code; perform code reviews
- Administer the enterprise password management platform, including vault structure, policies, provisioning, onboarding/offboarding, and upgrades
- Support the hardware security key lifecycle, including provisioning, enrollment, replacements, PIN resets, and recovery
- Coordinate hardware security key shipping and reclamation with Asset Management
- Monitor platform health, apply updates, and coordinate with vendors
- Create runbooks, documentation, and knowledge-base articles
- Review requirements and identify design considerations
- Analyze authentication, authorization, and access data for troubleshooting, audits, and improvement
- Troubleshoot application access issues, authentication errors, and integration failures
- Support end users and partner teams with identity-related requests and RBAC questions
- Participate in the on-call rotation and respond to identity platform incidents
Requirements:
- 3+ years of IT engineering experience
- At least 1 year administering an enterprise password management platform; 1Password preferred, with Keeper and Bitwarden considered
- Hands-on experience with Active Directory, Microsoft Entra ID, and Okta, including application onboarding and SSO/SCIM configuration
- Strong understanding of hardware security tokens such as YubiKey, Google Titan, and Feitian
- Working knowledge of RBAC, SSO, SAML/OIDC, and MFA
- Scripting experience with PowerShell, Python, or both; ideally including Microsoft Graph API and Entra ID app registrations
- Working knowledge of ITIL or other change management frameworks, including change requests, incident management, and release processes
- Experience with cloud platforms; Azure required and AWS strongly preferred
- Experience with Git, CI/CD, and code review
- Exposure to PAM platforms such as CyberArk strongly preferred
- Proactive, self-directed approach and ability to identify improvements
- Enthusiasm for learning new technologies; enterprise security certifications or coursework such as CISSP, CISA, SC-300, AZ-900, Security+, or AI governance completed or in progress is ideal
- Practical decision-making and commitment to documentation
- Authorization to work in the United States for any employer
- Clear and concise written and verbal communication skills
- Learner's mindset and commitment to growth
- Drive for impact and excellence
- Collaborative and empathetic approach
Benefits:
- Fully remote or hybrid option for candidates living near College Board offices (Tuesday and Wednesday in office)
- Meaningful career and supportive team
- Comprehensive compensation and benefits package
- Location-adjusted salaries
- Transparent conversations about compensation and benefits
- Occasional business travel to meet in person
Similar Jobs
Regional Electrical Integrity Engineer
Remote Electrical Integrity Engineer improving automation, controls, and power systems. Supporting safe, efficient production across Cargill’s global food and agriculture operations.
CAM Engineer
CAM Engineer processing Gerber data, panel drawings, SMT files, and engineering changes for PCB Connect, a global printed-circuit-board supplier. Coordinating factories, customers, and manufacturing partners remotely from the Philippines.
COTS Engineer
COTS Systems Engineer maintaining secure enterprise applications across Windows, RHEL, virtualized, and AWS environments. Supporting DMI’s government and commercial clients through upgrades, troubleshooting, and security compliance.
Senior Requirements Engineer
Senior Requirements Engineer supporting DHS CBP mission systems through technology evaluation, requirements analysis, trade studies, and engineering documentation.
Durable Workflows Engineer
Durable Workflows Engineer operating Swisscom’s HR automation platform. Building secure, observable Temporal workflows and AWS infrastructure with Python.
Microsoft 365 Engineer
Microsoft 365 Engineer owning Entra ID, Microsoft 365, and identity automation. Securing access infrastructure for Nebius’s global AI cloud platform.
Planning Engineer
Engenheiro de Planejamento remoto na Capco, consultoria que promove inclusão e responsabilidade social. Estruturando cronogramas, relatórios de progresso e análises quantitativas de riscos e custos.
Buyer, Custom Engineered Solutions
Buyer procuring raw materials, MRO, and services for GCG’s wire and cable solutions manufacturing business. Managing suppliers, inventory, purchase orders, and production material availability.
Senior Snowflake Engineer
Senior Snowflake Engineer building scalable Python, Matillion, and Snowflake data pipelines. Supporting Blend’s AI services through cloud data warehousing and analytics solutions.
Lean Engineer, Formal Mathematics, Lean 4, Mathlib, Theorem Proving
Lean engineer writing and reviewing Lean 4 proofs for a leading AI lab. Formalizing mathematics and improving machine-checked reasoning in frontier AI systems.
Technical Engineer
Technical Engineer providing advanced troubleshooting support for complex electro/mechanical equipment, software, and networked systems. Escalating design and reliability issues and supporting customer installation and training.
BIW & Battery Housing Engineer
BIW and battery housing engineer developing automotive structural casting, joining, and mixed-material solutions for ALTEN Mexico. Supporting vehicle body and battery housing design, validation, suppliers, and manufacturing.
Engineer L3
L3 Engineer handling complex escalations for a managed IT services partner. Administering Microsoft Cloud environments, coaching technicians, and supporting client technology projects.
Virtualization Engineer
Virtualization Engineer designing and operating enterprise VMware, networking, and storage platforms. Supporting hybrid cloud and cloud-native workloads for a U.S. technology consulting and software company.
Senior RDMA Performance Engineer
Senior RDMA Performance Engineer validating NVIDIA-based AI data-center networks for CodiLime, a software and network engineering services company. Optimizing RDMA fabrics, congestion control, benchmarking, and automation.
Senior RDMA Performance Engineer
RDMA Performance Engineer optimizing NVIDIA AI data center networks for CodiLime, a software and network engineering services company. Benchmarking RDMA fabrics and tuning congestion control for high-performance workloads.
Site Safety Engineer
Site Safety Engineer enforcing OSHA and company safety programs on Gray Construction project sites. Traveling from anywhere in the USA to support industrial construction operations.
Plumbing and Heating Engineer
Clean Energy Technician installing heat pumps, cylinders, and radiators for Aira’s sustainable home-energy systems. Training and progression toward heat pump installation.
Microsoft 365 Engineer
Microsoft 365 Engineer managing Microsoft 365, identity, endpoint, and security environments for German managed-service customers. Automating administration remotely with PowerShell and Graph.
Senior Go Consultant – Engineer
Senior Go consultant engineering high-performance software and scalable architectures for German manufacturing clients. Advising customers at C-level and architecture level while delivering critical projects.