The College Board
The College Board
1,001 – 5,000 Employees
EducationNon-profit
The College Board is a mission-driven nonprofit organization working to expand access, excellence, and equity in education. Its work helps students prepare for higher education, develop essential skills, and navigate pathways to college opportunity while addressing barriers that can limit access. With teams working across several U.S. locations, The College Board brings together education professionals focused on collaboration, inclusion, and respect. The organization is also modernizing its operations and strengthening its digital presence to better support students and families nationwide.

Workforce IAM Engineer at The College Board (Remote)

Build and secure workforce identity systems for The College Board, an education-focused nonprofit. Focus areas include RBAC, Microsoft Entra ID, Okta, password management, and hardware security keys.

Description

  • Design, test, deploy, and maintain persona-based RBAC roles and access policies
  • Develop scalable application logic and identity automations
  • Maintain Microsoft Entra ID and Okta integrations and workflows, including application onboarding and SSO/SCIM setup
  • Automate role assignments, access provisioning, and reporting with PowerShell and related tools
  • Update RBAC roles as organizational structures, entitlements, and applications evolve
  • Write, test, document, and review code
  • Administer the enterprise password management platform, including vaults, policies, provisioning, onboarding, offboarding, and upgrades
  • Manage the hardware security key lifecycle, including provisioning, enrollment, replacements, PIN resets, and recovery
  • Coordinate hardware security key shipment and reclamation with Asset Management
  • Monitor platform health, apply updates, and coordinate vendor support
  • Develop runbooks, technical documentation, and knowledge-base articles
  • Review requirements and assess design considerations
  • Analyze authentication, authorization, and access data to support troubleshooting, audits, and improvements
  • Resolve application access issues, authentication errors, and integration failures
  • Assist end users and partner teams with identity requests and RBAC questions
  • Join the on-call rotation and respond to identity platform incidents

Requirements

  • At least three years of IT engineering experience
  • At least one year administering an enterprise password management platform; 1Password is preferred, while Keeper and Bitwarden are also considered
  • Hands-on experience with Active Directory, Microsoft Entra ID, and Okta, including application onboarding and SSO/SCIM configuration
  • Strong understanding of hardware security tokens, including YubiKey, Google Titan, and Feitian
  • Working knowledge of RBAC, SSO, SAML/OIDC, and MFA
  • Experience scripting with PowerShell, Python, or both; familiarity with Microsoft Graph API and Entra ID app registrations is preferred
  • Working knowledge of ITIL or another change management framework, including change requests, incident management, and release processes
  • Cloud platform experience, with Azure required and AWS strongly preferred
  • Experience with Git, CI/CD, and code review
  • Exposure to PAM platforms such as CyberArk is strongly preferred
  • Proactive, self-directed working style with the ability to identify improvements
  • Interest in learning new technologies; enterprise security certifications or coursework such as CISSP, CISA, SC-300, AZ-900, Security+, or AI governance completed or underway is preferred
  • Practical judgment and a strong commitment to documentation
  • Authorization to work in the United States for any employer
  • Clear and concise written and verbal communication
  • Commitment to continuous learning and professional growth
  • Focus on delivering impact and excellence
  • Collaborative and empathetic approach

Benefits

  • Fully remote work, with a hybrid option for candidates near College Board offices requiring in-office work on Tuesdays and Wednesdays
  • Meaningful work and a supportive team
  • Comprehensive compensation and benefits package
  • Salaries adjusted by location
  • Transparent discussions about compensation and benefits
  • Occasional business travel for in-person meetings

Related Jobs