Cloud Identity and Access Engineer

  • Durham, NC
  • Posted 13 days ago | Updated 1 hour ago

Overview

On Site
USD 100,000.00 - 115,000.00 per year
Full Time

Skills

Active Directory
Business-to-business
Retail
IaaS
Domain controllers
User experience
Functional design
Cloud computing
Identity management
Release management
English
Higher education
Human resources
Strategic management
Microsoft
Governance
Innovation
Biometrics
Policies
Microsoft Azure
Management
Design
Migration
Acquisition
Publishing
Automation
Research and development
ProVision
PASS
Authentication
SSO
SAML
OAuth
OIDC
RBAC
Agile
ITIL
DevOps
Communication
Expect
IMPACT
Strategy
Finance
Marketing
Legal
Law
Recruiting

Job Details

The Role

The Cloud Identity and Access Engineer will be part of a team that innovates, engineers and maintains high level support of Pearson's Internal Identity platforms. These include Microsoft Active Directory, Microsoft Entra Identity and governance, and similar toolsets. This will primarily be focused on the cloud infrastructure.

LOCATION: Raleigh/Durham NC, hybrid role working Tuesday - Thursday in office.

The Role responsibilities will include:
  • Identity innovation with new technologies and protocols including Security AIs, Zero trust, Verified ID, and biometrics.
  • Deployments and configuration of Enterprise Applications, Conditional Access Policies, and B2B/B2C directories in Microsoft Entra/Azure AD
  • Help Manage 220+ AD domain controllers, across several AD domains
  • Design, plan and manage large Active Directory migrations due to acquisition/divestiture
  • Assist in publishing and enforcing defined standards
  • Identify areas in the environment which can be enhanced to deliver an improved user experience; automation, simplification, etc.
  • Liaison with 3rd party vendors to extract requirements and provide solutions for the system
  • Offer consultation with other teams for cross-functional design engagements

Required Experience and knowledge:
  • Experience with Microsoft Entra Identity and Governance, or Azure Identity Lifecycle
  • Provision Infrastructure as a service cloud computing for platforms such as Azure or Google.
  • Detailed knowledge of AD Schema. Security models and updates
  • Design, plan and manage large Active Directory migrations
  • Knowledge in Identity Access management of Azure Subscriptions, Azure AD, Azure AD Connect, Azure AD Pass Through Authentication
  • Experience in managing / creating conditional Access policies
  • Knowledge in Configuring SSO for applications in Entra using - SAML/OAUTH/OIDC
  • Knowledge in RBAC model for AAD role assignment
  • Comfortable with Agile and ITIL practices around change and release management
  • Familiar with Platform and Services security processes including vulnerabilities remediation.

Requested Experience and Skills:
  • Understanding of DevOps.
  • Experience with Stakeholder and Executive Communication

Compensation at Pearson is influenced by a wide array of factors including but not limited to skill set, level of experience, and specific location. As required by the Colorado, California, Washington State, New York State and New York City laws, the pay range for this position is as follows:

The minimum full-time salary range is between $100k - $115k.

This position is eligible to participate in an annual incentive program, and information on benefits offered is here.

What to expect from Pearson

Did you know Pearson is one of the 10 most innovative education companies of 2022?

At Pearson, we add life to a lifetime of learning so everyone can realize the life they imagine. We do this by creating vibrant and enriching learning experiences designed for real-life impact. We are on a journey to be 100 percent digital to meet the changing needs of the global population by developing a new strategy with ambitious targets. To deliver on our strategic vision, we have five business divisions that are the foundation for the long-term growth of the company: Assessment & Qualifications, Virtual Learning, English Language Learning, Workforce Skills and Higher Education. Alongside these, we have our corporate divisions: Digital & Technology, Finance, Global Corporate Marketing & Communications, Human Resources, Legal, Strategy and Direct to Consumer. Learn more at We are Pearson.

We value the power of an inclusive culture and also a strong sense of belonging. We promote a culture where differences are embraced, opportunities are accessible, consideration and respect are the norm and all individuals are supported in reaching their full potential. Through our talent, we believe that diversity, equity and inclusion make us a more innovative and vibrant place to work. People are at the center, and we are committed to building a workplace where talent can learn, grow and thrive.

Pearson is an Affirmative Action and Equal Opportunity Employer and a member of E-Verify. We want a team that represents a variety of backgrounds, perspectives and skills. The more inclusive we are, the better our work will be. All employment decisions are based on qualifications, merit and business need. All qualified applicants will receive consideration for employment without regard to race, ethnicity, color, religion, sex, sexual orientation, gender identity, gender expression, age, national origin, protected veteran status, disability status or any other group protected by law. We strive for a workforce that reflects the diversity of our communities.

To learn more about Pearson's commitment to a diverse and inclusive workforce, navigate to: Diversity, Equity & Inclusion at Pearson.

If you are an individual with a disability and are unable or limited in your ability to use or access our career site as a result of your disability, you may request reasonable accommodations by emailing

Note that the information you provide will stay confidential and will be stored securely. It will not be seen by those involved in making decisions as part of the recruitment process.

Job: TECHNOLOGY

Organization: Corporate Strategy & Technology

Schedule: FULL_TIME

Workplace Type: Hybrid

Req ID: 15926