Lead Entra Id Engineer

In your career, let’s prove what’s possible.

At Lam Research, we create equipmentthat drives technological advancements in the semiconductor industry. Our innovative solutions enable chipmakers to power progress in nearly all aspects of modern life, and it takes each member of our team to make it possible.

Across our organization, our employees come to work and change the world. We take on the toughest challenges with precision and accuracy. We push for the next big semiconductor breakthrough. We lead the way in one of the most critical and fast-moving industries on the planet. And we do it together, with deep connections and limitless collaboration.

The impact we have on the world is made possible by focusing on our people. So we recognize and celebrate our teams’ achievements. We strive to create an inclusive and diverse culture where everyone’s contribution and voice has value. We evaluate and evolve our offerings, so our people receive the support and empowerment to do meaningful things for their lives, careers, and communities.

Because at Lam, we believe that when people are the priority and they’re inspired to unleash the power of innovation for a better world together, anything is possible.

Lead Entra Id Engineer

Date: Sep 30, 2026

Location: Fremont, CA, US, 94538

Worker Category: Virtual Flex

The group you’ll be a part of

The Global Information Systems Group is dedicated to the success of Lam through providing best-in-class and innovative information system solutions and services. Together, we support users globally with data, information, and systems to achieve their business objectives.

The impact you’ll make

The Lead Entra ID / Access Management Engineer is responsible for the architecture, engineering, delivery, and operational excellence of access management services supporting enterprise workforce, customer, and external partner identity populations. The role requires a seasoned identity professional with a consistent track record of delivering secure, scalable, production-grade access management solutions in complex global environments.

What you’ll do

Access Management Strategy and Engineering

• Lead enterprise access management solutions for workforce, partners, suppliers, contractors, and customers.
• Act as the technical lead for Microsoft Entra ID, authentication, federation, and identity integrations.
• Define standards, architectures, deployment models, and operational procedures.
• Drive migration from legacy authentication to modern cloud-based identity solutions.

Authentication, Federation, and Identity Services

• Design and support SSO, MFA, passwordless authentication, Conditional Access, and federation services.
• Implement authentication and authorization using SAML, OAuth 2.0, OpenID Connect, SCIM, and JWT.
• Partner with technology teams to onboard applications to strategic identity platforms.
• Develop secure integration patterns for applications, APIs, and automated access scenarios.

External Partner and Customer Access Management

• Design secure B2B, partner, supplier, and customer identity solutions.
• Develop federation and onboarding models for external organizations.
• Create scalable access patterns for portals, applications, APIs, and digital services.
• Support customer and partner identity needs in alignment with security architecture.

What you'll do. cont'd

Security, Governance, and Compliance

• Ensure adherence to Zero Trust, least privilege, and enterprise security policies.
• Support compliance, audit, privacy, governance, and risk management requirements.
• Participate in security reviews, onboarding assessments, and risk reduction efforts.
• Maintain technical documentation, runbooks, architecture diagrams, and control evidence.

Platform Reliability and Operational Excellence

• Resolve complex authentication, authorization, federation, and provisioning issues.
• Develop monitoring, automation, reporting, and observability capabilities.
• Establish standards for reliability, disaster recovery, change management, and releases.
• Drive improvements in scalability, performance, resiliency, and operational efficiency.

Technical Leadership and Delivery

• Lead projects from requirements through deployment and ongoing support.
• Mentor engineers and application teams on identity best practices and standards.
• Provide technical guidance to architects, security teams, stakeholders, and leadership.
• Maintain roadmaps supporting enterprise, partner, and customer identity strategies.

Who we’re looking for

• Bachelor's degree in Computer Science, Information Systems, Computer Engineering, Cybersecurity, or a related technical discipline required.
• Master's degree in a related discipline preferred.
• 10+ years of experience in Identity and Access Management, Information Security, Infrastructure Engineering, Cloud Security, or related technology disciplines.
• 7+ years of hands‑on experience designing, implementing, and supporting Microsoft Entra ID solutions in complex enterprise environments.
• Demonstrated experience delivering access management solutions for multiple identity populations, including workforce, customer, external partner, supplier, contractor, application, and non‑human identities.
• Proven experience with large‑scale application onboarding, federation, authentication modernization, access policy engineering, identity lifecycle integration, and cloud identity transformation initiatives.
• Experience leading technical teams or workstreams, mentoring engineers, and driving engineering best practices without requiring direct people‑management responsibility.
• Track record of successfully delivering mission‑critical identity and access management programs in highly regulated, globally distributed, and operationally complex environments.

Preferred qualifications

• Experience supporting semiconductor, high‑tech manufacturing, or other Fortune 500 global enterprises.
• Experience with one or more adjacent identity or security platforms such as Ping Identity, Okta, ForgeRock, Saviynt, SailPoint, CyberArk, or similar enterprise IAM technologies.
• Knowledge of Zero Trust architecture, identity threat detection, risk‑based access, workload identity, non‑human identity, and AI agent identity governance use cases.
• Familiarity with cloud platforms and enterprise application ecosystems such as Azure, AWS, SAP, ServiceNow, Salesforce, custom web applications, and API platforms.
• Microsoft Certified: Identity and Access Administrator Associate
• Microsoft Certified: Cybersecurity Architect Expert
• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM)
• Certified Identity and Access Manager or equivalent IAM‑focused certification

Our commitment

We believe it is important for every person to feel valued, included, and empowered to achieve their full potential. By bringing unique individuals and viewpoints together, we achieve extraordinary results.

Lam Research ("Lam" or the "Company") is an equal opportunity employer. Lam is committed to and reaffirms support of equal opportunity in employment and non‑discrimination in employment policies, practices and procedures on the basis of race, religious creed, color, national origin, ancestry, physical disability, mental disability, medical condition, genetic information, marital status, sex (including pregnancy, childbirth and related medical conditions), gender, gender identity, gender expression, age, sexual orientation, or military and veteran status or any other category protected by applicable federal, state, or local laws. It is the Company's intention to comply with all applicable laws and regulations. Company policy prohibits unlawful discrimination against applicants or employees.

Lam offers a variety of work location models based on the needs of each role. Our hybrid roles combine the benefits of on‑site collaboration with colleagues and the flexibility to work remotely and fall into two categories – On‑site Flex and Virtual Flex. ‘On‑site Flex’ you’ll work 3+ days per week on‑site at a Lam or customer/supplier location, with the opportunity to work remotely for the balance of the week. ‘Virtual Flex’ you’ll work 1‑2 days per week on‑site at a Lam or customer/supplier location, and remotely the rest of the time.

CA San Francisco Bay Area Salary Range for this position: $137,000.00 - $287,000.00.

The above salary range for this position is relevant to applicants that reside or work onsite in the California, San Francisco Bay Area only. Salary offers will depend on factors that include the location you work from, your level, education, training, specific skills, years of experience and comparison to other employees already in this role. Actual salary may vary from salary offered due to numerous factors including but not limited to unpaid time off, unpaid leave, company mandated shutdown, and other relevant factors.

Our Perks and Benefits

At Lam, our people make amazing things possible. That’s why we invest in you throughout the phases of your life with a comprehensive set of outstanding benefits.

Nearest Major Market: San Francisco
Nearest Secondary Market: Oakland
Job Segment: Manufacturing Engineer, Developer, Computer Science, Engineer, Information Security, Engineering, Technology