IAM Service Integration Engineer

NBC’s IAM team is seeking an experienced IAM Service Integration Engineer to join our team. The ideal candidate will assist with delivery, design, and onboarding to IAM services including SSO, MFA, IGA, PAM, and PKI. This role combines service integration with foundational IAM engineering responsibilities, including configuration, onboarding design, and technical validation of identity solutions across enterprise applications.

Responsibilities:

• Collaborate with stakeholders to gather IAM requirements
• Analyze systems and processes for IAM integration opportunities
• Assist onboarding of users and applications to IAM services
• Develop and maintain IAM documentation
• Provide support and troubleshooting for IAM issues
• Stay current on IAM industry trends
• Assist with technical onboarding of applications including authentication flows and access models
• Support configuration and validation of IAM solutions (SailPoint IIQ, CyberArk, SSO, MFA)
• Analyze authentication methods (SAML, OAuth, OIDC, LDAP)
• Participate in application owner design interviews and onboarding assessments
• Validate user provisioning and deprovisioning flows
• Support RBAC / entitlement mapping and access design
• Troubleshoot integration issues using logs, tokens, and assertions
• Identify gaps between application requirements and IAM capabilities

Qualifications:

• Bachelor’s degree or equivalent experience
• 2–5 years IAM / Security Engineering / Identity Operations experience
• Experience with SailPoint IIQ and CyberArk
• Strong communication and stakeholder engagement skills
• Experience gathering and documenting requirements
• Understanding of authentication protocols: SAML 2.0, OAuth, OpenID Connect, LDAP
• Ability to interpret SAML assertions and JWT tokens
• Understanding of Joiner/Mover/Leaver lifecycle
• Experience with provisioning / deprovisioning flows
• Ability to engage application owners in onboarding readiness discussions
• Scripting is a plus but not required

Desired Characteristics:

• Self-starter and fast learner
• Ability to work in complex environments
• Strong collaboration skills
• Customer-focused mindset

Additional Requirements:

Fully Remote: This position has been designated as fully remote, meaning that the position is expected to contribute from a non-NBCUniversal worksite, most commonly an employee’s residence.

This position is eligible for company sponsored benefits, including medical, dental and vision insurance, 401(k), paid leave, tuition reimbursement, and a variety of other discounts and perks. Learn more about the benefits offered by NBCUniversal by visiting the Benefits page of the Careers website. Salary range: $100,000 - $130,000

As part of our selection process, external candidates may be required to attend an in-person interview with an NBCUniversal employee at one of our locations prior to a hiring decision. NBCUniversal's policy is to provide equal employment opportunities to all applicants and employees without regard to race, color, religion, creed, gender, gender identity or expression, age, national origin or ancestry, citizenship, disability, sexual orientation, marital status, pregnancy, veteran status, membership in the uniformed services, genetic information, or any other basis protected by applicable law.

If you are a qualified individual with a disability or a disabled veteran, you have the right to request a reasonable accommodation if you are unable or limited in your ability to use or access nbcunicareers.com as a result of your disability. You can request reasonable accommodations by emailing [email protected].

For LA County and City Residents Only: NBCUniversal will consider for employment qualified applicants with criminal histories, or arrest or conviction records, in a manner consistent with relevant legal requirements, including the City of Los Angeles' Fair Chance Initiative For Hiring Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act, where applicable.