Enterprise Security Engineer - IC; ENTSEC - Enterprise Security

At Power School, we power education for students around the world. As a global leader in cloud-based K-12 education technology, we help schools operate more effectively and support better outcomes for educators, students, and families.

Our Security team protects the people, systems, and information that make that mission possible. We are looking for an Identity & Access Management Engineer who can help us make access simple for the right people and difficult for everyone else.

The Identity & Access Management (IAM) Engineer helps build, secure, automate, and support the identity services that connect Power School employees and partners to the technology they need.

You will own and support IAM capabilities across Microsoft Active Directory, Microsoft Entra , SailPoint, privileged access, authentication, and enterprise applications. You will implement secure access controls, onboard applications, troubleshoot complex identity issues, automate manual processes, and continuously improve how identities and access are managed across our environment.

This is a hands‑on engineering role for someone who understands both sides of identity: protecting the organization while providing a reliable, efficient user experience.

What You Will Do

• Administer and support Microsoft Active Directory and Microsoft Entra s hybrid enterprise environments, including identity synchronization, users, groups, roles, and authentication services.
• Manage identity lifecycle processes across joiner, mover, and leaver events, including provisioning, deprovisioning, access requests, birthright access, and entitlement changes.
• Implement and maintain role-based access control (RBAC), least‑privilege access, separation of duties, and other identity governance controls.
• Configure and support Multi‑Factor Authentication (MFA), Conditional Access, passwordless authentication, passkeys, FIDO2, and related authentication technologies.
• Implement and support enterprise SSO and federation integrations using SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), SCIM, and related standards.
• Onboard enterprise and SaaS applications into Power School’s identity ecosystem, including application registrations, federation, provisioning, certificates, claims, permissions, and access models.
• Administer Microsoft Entra Privileged Identity Management (PIM) and support privileged access controls that enforce just‑in‑time and least‑privilege access.
• Support SailPoint identity governance capabilities, including provisioning workflows, access requests, entitlement management, access certifications, and application onboarding.
• Troubleshoot authentication, federation, provisioning, directory synchronization, entitlement, and access issues across cloud and on‑premises environments.
• Build and maintain automation using Power Shell, Bash, Microsoft Graph API, REST APIs, and other appropriate tools to improve reliability and reduce manual administration.
• Monitor IAM platforms and authentication services for availability, performance, security events, and control failures, and support identity‑related incident investigation and response.
• Support access reviews, audits, and compliance activities by maintaining accurate controls, documentation, technical evidence, and remediation records.
• Partner with Security, Infrastructure, Compliance, HR, application owners, and business teams to translate access requirements into secure and scalable identity solutions.
• Create and maintain technical documentation, diagrams, standards, runbooks, and operating procedures.
• Identify recurring issues and opportunities to improve IAM processes through automation, standardization, and stronger controls.
• Provide backup support for Microsoft 365 identity‑related administration,…