Identity Architect

Build the Future

Do you enjoy testing the limits of possibility? At McGraw Hill, our Global Technology Services organization drives progress and help build the future of learning. If you have the passion and technical expertise to thrive in an innovative and agile environment, we want to learn more about you

Your Impact on the team

McGraw Hill is seeking an experienced Identity Architect to support its Identity & Access Management initiatives within the Cybersecurity organization. The role will heavily focus on the Okta Identity Provider (IdP) environment and will ensure least-privileged access for McGraw hill applications. Acting as both a strategist and technical leader, you will be responsible for drive strategic initiatives, including modernization, Zero Trust enablement, federation, automation, implementing new features and providing strategic guidance for IDM-related goals.

This is a remote position open to applicants authorized to work for any employer within the United States.

What you will be doing

• Serve as a Subject Matter Expert (SME) for MH's Okta environment, delivering L3 escalation support and incident response.
• Contribute to the IAM roadmap and develop patterns, standards, trends.
• Align IAM strategy to business goals and the NIST CSF Framework.
• Support audit requirements for SOC 2 and SOX.
• Support Proof of Concepts of applications integrated with Okta.
• Design and support conditional access, adaptive MFA, authentication policies.
• Track emerging IAM trends and evaluate their fit within the McGraw Hill environment.
• Work with vendors and application owners to integrate applications with Okta.
• Perform maintenance and upgrades to IAM infrastructure throughout the environment

We're looking for someone with

• Hold an Okta Certification Professional or equivalent IdP related certifications.
• Equivalent experience in Networking, SaaS, and IAM related incident response, end user identity/authentication issues, ITIL standards.
• Experience working with IAM protocols (SAML, OAuth2.0, OIDC, SCIM, SWA, LDAP, Kerberos, FIDO2).
• Experience with management and implementation of SSL/TLS certificates.
• Thorough understanding and maintenance of Role Based Access Control (RBAC), Principle of Least Privilege (PoLP).
• Experience working with LDAP, Active Directory, Entra AD or related directory services.
• Experience with API usage in an IAM capacity leveraging Postman and RESTful API documentation.
• Strong communication skills and comfortability working directly with business stakeholders, vendors, leadership.
• Ability to present identity-related risks and recommendations to leadership.
• Ability to translate complex identity concepts into business value.

Preferred:

• Experience working with Okta Workflows, Org-to-Org, and Okta Identity Governance modules.
• Experience working with IAM automation.
• Cybersecurity certifications are recommended but not required.
• Bachelor's degree in related field or equivalent experience

Why work for us?

There has never been a better time to join McGraw Hill. In our culture of curiosity and innovation, you will be able to own your growth and develop as we do.

The pay range for this position is between $105,000 - $125,000 annually; however, base pay offered may vary depending on job-related knowledge, skills, experience, and location. An annual bonus plan may be provided as part of the compensation package, in addition to a full range of medical and/or other benefits, depending on the position offered. Click here to learn more about our benefit offerings.

McGraw Hill recruiters always use a "@mheducation.com" email address and/or from our Applicant Tracking System, iCIMS. Any variation of this email domain should be considered suspicious. Additionally, McGraw Hill recruiters and authorized representatives will never request sensitive information in email.

McGraw Hill uses an automated employment decision tool (AEDT) to assist in the screening process by recommending candidates with "like skills" based on resume and job data. To request an alternative screening process, please select "Opt-Out" when asked to "Consent to use of Automated Employment Decision Tools" during the application.