{"id":4137956,"url":"https://alion.io/job/powerschool-identity-access-management-engineer-2","title":"Identity Access Management Engineer","company":{"id":20238,"name":"PowerSchool","domain":"powerschool.com","url":"https://alion.io/company/powerschool","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"iCIMS","truth_index":{"grade":"A","score":95,"open_postings":3,"ghost_share":0,"stale_share":0,"repost_share":0.667,"time_to_fill_p50_days":12,"computed_at":"2026-11-11T05:49:22Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Plano, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"SharePoint","optional":false},{"name":"SOC 2","optional":false}],"status":"live","first_seen_at":"2026-11-12T04:18:42Z","employer_posted_date":"2026-11-12","last_verified_at":"2026-11-12T04:18:42Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Overview\nAt PowerSchool, we power education for students around the world. As a global leader in cloud-based K-12 education technology, we help schools operate more effectively and support better outcomes for educators, students, and families.\nOur Security team protects the people, systems, and information that make that mission possible. We are looking for an Identity & Access Management Engineer who can help us make access simple for the right people and difficult for everyone else.\nResponsibilities\nThe Identity & Access Management (IAM) Engineer helps build, secure, automate, and support the identity services that connect PowerSchool employees and partners to the technology they need.\nYou will own and support IAM capabilities across Microsoft Active Directory, Microsoft Entra ID, SailPoint, privileged access, authentication, and enterprise applications. You will implement secure access controls, onboard applications, troubleshoot complex identity issues, automate manual processes, and continuously improve how identities and access are managed across our environment.\nThis is a hands-on engineering role for someone who understands both sides of identity: protecting the organization while providing a reliable, efficient user experience.\nWhat You Will Do\nAdminister and support Microsoft Active Directory and Microsoft Entra ID across hybrid enterprise environments, including identity synchronization, users, groups, roles, and authentication services.\nManage identity lifecycle processes across joiner, mover, and leaver events, including provisioning, deprovisioning, access requests, birthright access, and entitlement changes.\nImplement and maintain role-based access control (RBAC), least-privilege access, separation of duties, and other identity governance controls.\nConfigure and support Multi-Factor Authentication (MFA), Conditional Access, passwordless authentication, passkeys, FIDO2, and related authentication technologies.\nImplement and support enterprise SSO and federation integrations using SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), SCIM, and related standards.\nOnboard enterprise and SaaS applications into PowerSchool’s identity ecosystem, including application registrations, federation, provisioning, certificates, claims, permissions, and access models.\nAdminister Microsoft Entra Privileged Identity Management (PIM) and support privileged access controls that enforce just-in-time and least-privilege access.\nSupport SailPoint identity governance capabilities, including provisioning workflows, access requests, entitlement management, access certifications, and application onboarding.\nTroubleshoot authentication, federation, provisioning, directory synchronization, entitlement, and access issues across cloud and on-premises environments.\nBuild and maintain automation using PowerShell, Bash, Microsoft Graph API, REST APIs, and other appropriate tools to improve reliability and reduce manual administration.\nMonitor IAM platforms and authentication services for availability, performance, security events, and control failures, and support identity-related incident investigation and response.\nSupport access reviews, audits, and compliance activities by maintaining accurate controls, documentation, technical evidence, and remediation records.\nPartner with Security, Infrastructure, Compliance, HR, application owners, and business teams to translate access requirements into secure and scalable identity solutions.\nCreate and maintain technical documentation, diagrams, standards, runbooks, and operating procedures.\nIdentify recurring issues and opportunities to improve IAM processes through automation, standardization, and stronger controls.\nProvide backup support for Microsoft 365 identity-related administration, including Exchange Online and SharePoint, as needed.\nWhat Success Looks Like\nYou make secure access easier to manage, easier to audit, and more reliable for the people who depend on it. You reduce manual work through automation, resolve identity issues before they become larger problems, strengthen access controls, and help PowerSchool continuously improve how identities are protected across the enterprise.\nYou bring sound technical judgment, curiosity, attention to detail, and a service mindset to an area of security where both protection and user experience matter.\nQualifications\nWhat You Bring\n3+ years of experience in identity and access management, security engineering, systems engineering, or a related technical field, or an equivalent combination of education and experience.\nHands-on experience administering Microsoft Active Directory and Microsoft Entra ID in an enterprise environment.\nExperience with identity lifecycle management, including provisioning, deprovisioning, access requests, entitlements, and joiner/mover/leaver processes.\nExperience implementing or supporting SSO and federation using SAML, OAuth, and OIDC.\nExperience configuring MFA, Conditional Access, and modern authentication controls.\nWorking knowledge of identity governance and administration platforms such as SailPoint Identity Security Cloud or IdentityIQ.\nExperience with RBAC, least privilege, privileged access, access certification, and identity governance principles.\nExperience using PowerShell / Bash scripting to automate identity administration and troubleshoot IAM processes.\nStrong troubleshooting and root-cause analysis skills across complex cloud and hybrid identity environments.\nAbility to communicate technical concepts clearly and work effectively with security, infrastructure, application, compliance, and business teams.\nEven Better If You Have\nExperience with Microsoft Graph API, REST APIs, JSON, Python, or other scripting and integration technologies.\nExperience configuring Microsoft Entra PIM or enterprise Privileged Access Management (PAM) platforms.\nExperience with SCIM provisioning and API-based application integrations.\nExperience with SailPoint application onboarding, connectors, access certifications, workflows, or entitlement management.\nExperience supporting Microsoft 365, cloud platforms, or enterprise SaaS applications.\nFamiliarity with security and compliance frameworks such as NIST, ISO 27001, SOC 2, or SOX.\nExperience supporting security incidents involving compromised identities, credentials, authentication, or privileged access.\nMicrosoft SC-300, SailPoint, Security+, SSCP, CISSP, or other relevant identity/security certification.\nCompensation & Benefits\nCompensation & Benefits\nAlong with our highly market competitive base compensation, PowerSchool offers the following benefits:\nComprehensive Insurance Coverage (including Medical, Dental, Vision, Pharmacy benefits, Life Insurance and AD&D)\n\nFlexible Spending Accounts and Health Savings Accounts\n\nShort-Term Disability and Long-Term Disability\n\nComprehensive 401(k) plan\n\nGenerous Parental Leave\n\nUnrestricted paid time off (known as Discretionary Time Off - DTO)\n\nWellness Program, including ClassPass & Employee Assistance Program\n\nTuition Reimbursement\n\nOptional Benefits: Pet Insurance, Identity Theft Protection, Student Debt Repayment Program and Prepaid Legal coverage\n\nEEO Commitment\nEEO Commitment\nPowerSchool is committed to a diverse and inclusive workplace. PowerSchool is an equal opportunity employer and does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status. Our inclusive culture empowers PowerSchoolers to deliver the best results for our customers. We not only celebrate the diversity of our workforce, we celebrate the diverse ways we work. If you have a disability and need an accommodation regarding our recruiting process, please let us know by emailing .","description_format":"text","description_chars":7822,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Insurance coverage","Life insurance","Parental leave"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["EdTech Platforms","Learning Management Systems"],"lifecycle":[{"event":"open","at":"2026-11-12T04:18:42Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"H-1B filings in 12 months: 7","filings_12m":7,"filings_prev_12m":0,"green_card_filings_12m":0,"median_offered_wage_usd":167500,"route":null,"cap_exempt":false,"checked_at":"2026-11-11T07:38:50+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":12,"reasons":["conf:1","win:early"],"computed_at":"2026-11-12T06:07:45Z"},"pay":null,"html_url":"https://alion.io/job/powerschool-identity-access-management-engineer-2","json_url":"https://alion.io/job/powerschool-identity-access-management-engineer-2.json","meta":{"generated_at":"2026-11-12T06:07:45Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":12129,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":20238},"rest":"https://alion.io/mcp/rest/get_company?id=20238"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fpowerschool-identity-access-management-engineer-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fpowerschool-identity-access-management-engineer-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fpowerschool-identity-access-management-engineer-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/powerschool-identity-access-management-engineer-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fpowerschool-identity-access-management-engineer-2"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4137956}},{"tool":"search_jobs","arguments":{"company":"powerschool.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4137956},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}