Staff Identity Engineer – Radiant One

This is a fully remote position, open to applicants in Canada, +1 more country.

📋 Description

• Design, implement, and optimize Identity Fabric environments, encompassing replication topology, ACIs, high-availability setups, and performance optimization for enterprise-scale applications.

• Create identity provisioning workflows and develop bespoke connectors, including custom integrations that extend beyond standard configurations.

• Lead initiatives for directory consolidation, migration, and hybrid identity, which involve multi-forest Active Directory and Azure AD/Entra integration.

• Act as the technical escalation point for production challenges related to directory replication, provisioning failures, and identity correlation conflicts.

• Conduct root cause analyses and implement sustainable solutions.

• Collaborate with IAM governance, security architecture, and application teams to ensure directory and provisioning capabilities are in sync with the overarching identity strategy.

• Establish technical guidelines and best practices for directory and provisioning engineering.

• Provide mentorship to senior and mid-level engineers.

• Develop Python and PowerShell automation tools to minimize manual operational tasks and enhance reliability.

• Document architectural decisions, design considerations, and operational runbooks.

• Assess and influence roadmap decisions concerning the directory and provisioning technology stack.

⛳️ Requirements

• Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent professional experience.

• Over 8 years of practical experience in enterprise Identity and Access Management, specifically in identity provisioning and directory services.

• Direct production experience with Radiant Logic RadiantOne, including virtual directory design and identity correlation/aggregation.

• Direct production experience with Ping Directory or PingDirectoryProxy, focusing on replication and performance tuning.

• Extensive knowledge of LDAP/LDAPS fundamentals, including schema design, referrals, and resolving replication conflicts.

• Experience in designing and building provisioning workflows and connectors, including SCIM, JIT, and custom connector development.

• Proficiency in scripting languages such as JavaScript, Python, and PowerShell for automation, tooling, and provisioning tasks.

• Capability to make informed architectural trade-offs and guide technical direction for fellow engineers.

• Ability to thrive in a remote-first team environment.

• Familiarity with SailPoint IdentityIQ or other Identity Governance and Administration (IGA) platforms and collaboration with governance teams.

• Experience with hybrid identity architectures, Azure AD/Entra ID, and multi-forest Active Directory environments.

• Understanding of Privileged Access Management (PAM) boundaries, service account lifecycle, and privileged directory access.

• Experience leading directory consolidation or large-scale migration initiatives.

• Previous experience mentoring engineers or informally guiding technical direction within a team.

🏝️ Benefits

• Medical, dental, and vision insurance.

• 401(k) plan.

• Paid leave.

• Tuition reimbursement.

• A variety of additional discounts and perks.

• Eligibility for bonuses.