Principal IAM Engineer

Principal IAM Engineer

Natick, MA Hybrid Full Time $130k - $200k

A well-established technology organization is seeking a Principal IAM/Active Directory Engineer to provide technical leadership across enterprise identity platforms and security services. This role will play a critical part in shaping the strategy, architecture, security, and operational excellence of identity and access management capabilities across a complex enterprise environment. The ideal candidate will be responsible for driving improvements across Active Directory, Microsoft Entra ID, hybrid identity, privileged access, identity governance, and non-human identities. This position partners closely with security, cloud, infrastructure, and application teams to ensure scalable, secure, and resilient identity services that support business growth and modernization initiatives. This is a highly visible engineering role focused on strengthening identity security, driving automation, and establishing best practices across the organization's identity ecosystem.

Required Skills & Experience

• Bachelor's degree and 10+ years of professional experience or equivalent practical experience
• Deep expertise with Active Directory and Microsoft Entra ID
• Strong background supporting hybrid identity environments
• Experience designing authentication, authorization, and identity governance solutions
• Knowledge of privileged access management and identity security best practices
• Experience with identity threat detection, recovery planning, and platform hardening
• Strong automation and scripting capabilities
• Experience with APIs, Infrastructure as Code, and Git-based development workflows
• Hands-on experience with CI/CD methodologies and operational automation
• Knowledge of service principals, managed identities, certificates, secrets, and federated credentials
• Experience designing least-privilege access models and application permission governance

Desired Skills & Experience

• Experience supporting large-scale enterprise IAM environments
• Familiarity with federation, provisioning, and modern authentication technologies
• Knowledge of NIST, ISO 27001, and related security frameworks
• Experience with cloud security and application identity architecture
• Exposure to identity strategies supporting AI-enabled systems and automation platforms
• Experience building enterprise-wide identity standards, guardrails, and governance models

Daily Responsibilities

• Provide technical leadership for enterprise identity and access management platforms
• Design and enhance authentication, authorization, and identity governance capabilities
• Improve the security, resilience, and recoverability of identity infrastructure
• Lead platform hardening, threat detection, and operational readiness initiatives
• Drive automation efforts to improve reliability, consistency, and scalability
• Develop identity architecture standards for applications, services, and cloud platforms
• Partner with security, engineering, and infrastructure teams on strategic identity initiatives
• Create and maintain engineering best practices across IAM technologies
• Support governance and compliance requirements related to identity security
• Mentor team members and influence long-term identity strategy

The Offer

• Base salary up to $200,000
• Competitive bonus potential
• Opportunity to lead enterprise-scale IAM modernization initiatives
• Collaborative and security-focused engineering environment

You will receive the following benefits

• Medical Insurance
• Dental Benefits
• Vision Benefits
• Paid Time Off (PTO)
• 401(k)

Applicants must be currently authorized to work in the US on a full-time basis now and in the future.

Specialization: Cybersecurity