Senior Identity Engineer

Join Our Team as a Senior Identity Engineer!

Be at the forefront of bringing next-generation identity and security solutions to one of the world's largest education organizations.

As a key member of our team, you will engineer and provide high-level support for Pearson's internal identity platforms, including Microsoft Active Directory, Microsoft Entra Identity and Governance, and other cutting-edge tools.

Your primary focus will be on our cloud infrastructure, ensuring seamless and secure operations.

Drive Enterprise Innovations : Deploy and configure enterprise applications, conditional access policies, and B2B / B2C / Entra External ID directories in Microsoft Entra / Azure AD.

Oversee Extensive Infrastructure : Help manage over 220 AD domain controllers across multiple AD domains.

Lead Major Projects : Design, plan, and manage large Active Directory migrations resulting from acquisitions and divestitures.

Enforce Best Practices : Assist in publishing and enforcing defined standards to ensure consistency and security.

Enhance User Experience : Identify and implement enhancements to improve user experience through automation and simplification.

Collaborate with Vendors : Work with third-party vendors to gather requirements and develop system solutions.

Consult and Collaborate : Offer consultation to other teams for cross-functional design engagements, ensuring cohesive and integrated solutions.

Required Experience and Knowledge :

Experience with Microsoft Entra Identity and Governance, or Azure Identity Lifecycle.

Provisioning Infrastructure as a Service (IaaS) cloud computing for platforms such as Azure or Google.

Detailed knowledge of AD Schema, security models, and updates.

Design, planning, and management of large Active Directory migrations.

Expertise in Identity Access Management for Azure Subscriptions, Azure AD, Azure AD Connect, and Azure AD Pass-Through Authentication.

Experience in managing and creating Conditional Access policies.

Proficiency in configuring SSO for applications in Entra using SAML / OAUTH / OIDC.

Knowledge of the RBAC model for AAD role assignments.

Comfortable with Agile and ITIL practices around change and release management.

Familiarity with platform and services security processes, including vulnerability remediation.

Requested Experience and Skills

Understanding of DevOps.

Experience with Stakeholder and Executive Communication

What to expect from Pearson

Did you know Pearson is one of the 10 most innovative education companies of 2022?

At Pearson, we add life to a lifetime of learning so everyone can realize the life they imagine. We do this by creating vibrant and enriching learning experiences designed for real-life impact.

We are on a journey to be 100 percent digital to meet the changing needs of the global population by developing a new strategy with ambitious targets.

To deliver on our strategic vision, we have five business divisions that are the foundation for the long-term growth of the company : Assessment & Qualifications, Virtual Learning, English Language Learning, Workforce Skills and Higher Education.

Alongside these, we have our corporate divisions : Digital & Technology, Finance, Global Corporate Marketing & Communications, Human Resources, Legal, Strategy and Direct to Consumer. Learn more at

We value the power of an inclusive culture and also a strong sense of belonging. We promote a culture where differences are embraced, opportunities are accessible, consideration and respect are the norm and all individuals are supported in reaching their full potential.

Through our talent, we believe that diversity, equity and inclusion make us a more innovative and vibrant place to work.

People are at the center, and we are committed to building a workplace where talent can learn, grow and thrive.