Principal IAM Engineer

Natick

Job Description A well-established technology organization is seeking a **Principal IAM/Active Directory Engineer** to provide technical leadership across enterprise identity platforms and security services. This role will play a critical part in shaping the strategy, architecture, security, and operational excellence of identity and access management capabilities across a complex enterprise environment. The ideal candidate will be responsible for driving improvements across Active Directory, Microsoft Entra ID, hybrid identity, privileged access, identity governance, and non-human identities. This position partners closely with security, cloud, infrastructure, and application teams to ensure scalable, secure, and resilient identity services that support business growth and modernization initiatives. This is a highly visible engineering role focused on strengthening identity security, driving automation, and establishing best practices across the organization's identity ecosystem. Required Skills \& Experience * Bachelor's degree and 10 years of professional experience or equivalent practical experience * Deep expertise with Active Directory and Microsoft Entra ID * Strong background supporting hybrid identity environments * Experience designing authentication, authorization, and identity governance solutions * Knowledge of privileged access management and identity security best practices * Experience with identity threat detection, recovery planning, and platform hardening * Strong automation and scripting capabilities * Experience with APIs, Infrastructure as Code, and Git-based development workflows * Hands-on experience with CI/CD methodologies and operational automation * Knowledge of service principals, managed identities, certificates, secrets, and federated credentials * Experience designing least-privilege access models and application permission governance Desired Skills \& Experience * Experience supporting large-scale enterprise IAM environments * Familiarity with federation, provisioning, and modern authentication technologies * Knowledge of NIST, ISO 27001, and related security frameworks * Experience with cloud security and application identity architecture * Exposure to identity strategies supporting AI-enabled systems and automation platforms * Experience building enterprise-wide identity standards, guardrails, and governance models What You Will Be Doing **Daily Responsibilities** * Provide technical leadership for enterprise identity and access management platforms * Design and enhance authentication, authorization, and identity governance capabilities * Improve the security, resilience, and recoverability of identity infrastructure * Lead platform hardening, threat detection, and operational readiness initiatives * Drive automation efforts to improve reliability, consistency, and scalability * Develop identity architecture standards for applications, services, and cloud platforms * Partner with security, engineering, and infrastructure teams on strategic identity initiatives * Create and maintain engineering best practices across IAM technologies * Support governance and compliance requirements related to identity security * Mentor team members and influence long-term identity strategy The Offer * Base salary up to **$200,000** * Competitive bonus potential * Opportunity to lead enterprise-scale IAM modernization initiatives * Collaborative and security-focused engineering environment You will receive the following benefits * Medical Insurance * Dental Benefits * Vision Benefits * Paid Time Off (PTO) * 401(k) Applicants must be currently authorized to work in the US on a full-time basis now and in the future.