Staff Identity Engineer – RadiantOne

NBCUniversal

. Design, deploy, and tune Identity Fabric environments, including replication topology, ACIs, high-availability configuration, and enterprise-scale performance optimization .

Posted 9/24/2026full-timeRemote • New York • United States, CanadaLead💰 $125,000 - $155,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in Identity and Access Management, focusing on identity provisioning, directory services, and automation using Python and PowerShell. Proven ability to lead complex directory consolidation and migration projects while mentoring engineering teams and setting technical direction.

Highest-signal resume keywords

Identity And Access ManagementIdentity Provisioning WorkflowsDirectory ServicesPython AutomationAzure AD/Entra Integration

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Identity ProvisioningDirectory ConsolidationLDAP/LDAPS FundamentalsCustom Connector DevelopmentRadiant Logic RadiantOnePing DirectoryScripting in PythonScripting in PowerShellSCIMJIT

Soft Skills

Mentoring EngineersTechnical DirectionCollaboration

Tools & Technologies

SailPoint IdentityIQRadiant Logic RadiantOnePing DirectoryAzure ADEntra ID

Certifications & Qualifications

Bachelor's Degree in Computer ScienceBachelor's Degree in Information Security

Industry Keywords

Identity GovernanceHybrid Identity ArchitecturesMulti-Forest Active DirectoryPrivileged Access ManagementOperational Runbooks

Tech Stack

Tools & technologies

AzureJavaScriptPython

About the role

Key responsibilities & impact

Design, deploy, and tune Identity Fabric environments, including replication topology, ACIs, high-availability configuration, and enterprise-scale performance optimization
Design identity provisioning workflows and develop and debug bespoke custom connectors
Lead directory consolidation, migration, and hybrid identity initiatives involving multi-forest AD and Azure AD/Entra integration
Serve as technical escalation point for production issues involving directory replication, provisioning failures, and identity correlation conflicts
Drive root cause analysis and durable fixes
Partner with IAM governance, security architecture, and application teams to align directory and provisioning capabilities with broader identity strategy
Set technical direction and best practices for directory and provisioning engineering
Mentor senior and mid-level engineers
Build Python and PowerShell automation and tooling to reduce manual operational overhead and improve reliability
Document architecture decisions, design tradeoffs, and operational runbooks
Evaluate and influence roadmap decisions for the directory and provisioning technology stack

Requirements

What you’ll need

Bachelor's degree in Computer Science, Information Security, or related field, or equivalent work experience
8+ years of hands-on experience in enterprise Identity and Access Management, with a concentration in identity provisioning and directory services
Hands-on production experience with Radiant Logic RadiantOne, including virtual directory design and identity correlation/aggregation
Hands-on production experience with Ping Directory or PingDirectoryProxy, including replication and performance tuning
Deep working knowledge of LDAP/LDAPS fundamentals: schema design, referrals, and replication conflict resolution
Experience designing and building provisioning workflows and connectors, including SCIM, JIT, and custom connector development
Scripting experience in JavaScript, Python and PowerShell for automation, tooling, and provisioning
Ability to make and articulate architectural tradeoffs and set technical direction for other engineers
Ability to work effectively in a remote-first team environment
Experience with SailPoint IdentityIQ or other IGA platforms and collaborating with governance teams
Experience with hybrid identity architectures, Azure AD/Entra ID, and multi-forest Active Directory environments
Exposure to PAM boundaries, service account lifecycle, and privileged directory access
Experience leading directory consolidation or large-scale migration projects
Prior experience mentoring engineers or informally setting technical direction across a team

Benefits

Comp & perks

Medical, dental and vision insurance
401(k)
Paid leave
Tuition reimbursement
Variety of other discounts and perks
Bonus eligibility