**Join Our Team as a Senior Identity Engineer!** Be at the forefront of bringing next-generation identity and security solutions to one of the world's largest education organizations. As a key member of our team, you will engineer and provide high-level support for Pearson's internal identity platforms, including Microsoft Active Directory, Microsoft Entra Identity and Governance, and other cutting-edge tools. Your primary focus will be on our cloud infrastructure, ensuring seamless and secure operations. + **Drive Enterprise Innovations** : Deploy and configure enterprise applications, conditional access policies, and B2B/B2C/Entra External ID directories in Microsoft Entra/Azure AD. + **Oversee Extensive Infrastructure** : Help manage over 220 AD domain controllers across multiple AD domains. + **Lead Major Projects** : Design, plan, and manage large Active Directory migrations resulting from acquisitions and divestitures. + **Enforce Best Practices** : Assist in publishing and enforcing defined standards to ensure consistency and security. + **Enhance User Experience** : Identify and implement enhancements to improve user experience through automation and simplification. + **Collaborate with Vendors** : Work with third-party vendors to gather requirements and develop system solutions. + **Consult and Collaborate** : Offer consultation to other teams for cross-functional design engagements, ensuring cohesive and integrated solutions. **Required Experience and Knowledge:** + Experience with Microsoft Entra Identity and Governance, or Azure Identity Lifecycle. + Provisioning Infrastructure as a Service (IaaS) cloud computing for platforms such as Azure or Google. + Detailed knowledge of AD Schema, security models, and updates. + Design, planning, and management of large Active Directory migrations. + Expertise in Identity Access Management for Azure Subscriptions, Azure AD, Azure AD Connect, and Azure AD Pass-Through Authentication. + Experience in managing and creating Conditional Access policies. + Proficiency in configuring SSO for applications in Entra using SAML/OAUTH/OIDC. + Knowledge of the RBAC model for AAD role assignments. + Comfortable with Agile and ITIL practices around change and release management. + Familiarity with platform and services security processes, including vulnerability remediation. **Requested Experience and Skills** + Understanding of DevOps. + Experience with Stakeholder and Executive Communication **Who we are:** At Pearson, our purpose is simple: to help people realize the life they imagine through learning. We believe that every learning opportunity is a chance for a personal breakthrough. We are the world's lifelong learning company. For us, learning isn't just what we do. It's who we are. To learn more: We are Pearson. Pearson is an Affirmative Action and Equal Opportunity Employer and a member of E-Verify. We want a team that represents a variety of backgrounds, perspectives and skills. The more inclusive we are, the better our work will be. All employment decisions are based on qualifications, merit and business need. All qualified applicants will receive consideration for employment without regard to race, ethnicity, color, religion, sex, sexual orientation, gender identity, gender expression, age, national origin, protected veteran status, disability status or any other group protected by law. We strive for a workforce that reflects the diversity of our communities. If you are an individual with a disability and are unable or limited in your ability to use or access our career site as a result of your disability, you may request reasonable accommodations by emailing TalentExperienceGlobalTeam@grp.pearson.com. Note that the information you provide will stay confidential and will be stored securely. It will not be seen by those involved in making decisions as part of the recruitment process. **Job:** TECHNOLOGY **Organization:** Corporate Strategy & Technology **Schedule:** FULL\_TIME **Workplace Type:** Hybrid **Req ID:** 16645