Lead IAM Developer - Entra ID/Active Directory/Python - Newton, Ma

What You Will Be Doing Daily Responsibilities

• Design, develop, and maintain enterprise IAM solutions and services
• Lead the modernization and optimization of Microsoft Entra ID and Active Directory environments
• Build automated workflows that improve access provisioning, governance, and operational efficiency
• Develop custom integrations, APIs, and identity management tools
• Implement and enhance SSO, MFA, Conditional Access, and identity governance capabilities
• Improve security posture through automation, policy enforcement, and continuous monitoring
• Partner with security, infrastructure, and application teams to deliver scalable IAM solutions
• Develop solutions that support Zero Trust and least-privilege access strategies
• Identify opportunities to eliminate manual processes through engineering and automation
• Troubleshoot complex authentication, authorization, and directory services issues
• Establish IAM development standards, best practices, and documentation
• Mentor junior engineers and provide technical leadership across IAM initiatives

The ideal candidate will be a technical leader with extensive experience in Microsoft Entra ID and Active Directory , along with strong coding and automation capabilities. You will drive initiatives that improve identity governance, automate access management workflows, enhance authentication security, and reduce operational overhead through scalable engineering solutions.

This is a hybrid position based in Newton, MA , offering a salary of up to $200,000 . Required Skills & Experience

• 8+ years of experience in Identity and Access Management (IAM)
• Strong expertise with Microsoft Entra ID (Azure AD) and Active Directory
• Proven experience developing and automating IAM solutions in enterprise environments
• Advanced scripting and programming skills with PowerShell, Python, C#, or similar languages
• Experience building APIs, automation frameworks, and identity-related integrations
• Strong understanding of SSO, MFA, Conditional Access, RBAC, and Privileged Identity Management (PIM)
• Experience with identity lifecycle management, including provisioning and deprovisioning
• Knowledge of Zero Trust architecture and modern authentication protocols
• Experience securing hybrid identity environments
• Strong understanding of LDAP, Kerberos, SAML, OAuth 2.0, and OpenID Connect
• Experience implementing IAM security controls and governance standards
• Excellent troubleshooting, communication, and leadership skills

Desired Skills & Experience

• Experience with Identity Governance and Administration (IGA) platforms
• Experience with PAM technologies such as CyberArk, BeyondTrust, or related solutions
• Familiarity with Azure, AWS, and cloud-native identity services
• Knowledge of infrastructure-as-code and DevOps practices
• Experience integrating IAM solutions with HR, ERP, and business applications
• Exposure to SIEM platforms and security monitoring tools
• Microsoft, CISSP, CISM, or related security certifications
• Previous experience mentoring engineers or leading IAM development teams

• Competitive base salary up to $200,000
• Annual bonus opportunity
• Hybrid work schedule in Newton, MA
• Opportunity to lead strategic identity and security initiatives
• High-impact role with significant influence on enterprise security architecture

You will receive the following benefits

• Medical Insurance
• Dental Benefits
• Vision Benefits
• Paid Time Off (PTO)
• 401(k) with company match

Motion Recruitment Partners (MRP) is an Equal Opportunity Employer. All applicants must be currently authorized to work on a full-time basis in the country for which they are applying, and no sponsorship is currently available. Employment is subject to the successful completion of a pre-employment screening. Accommodation will be provided in all parts of the hiring process as required under MRP’s Employment Accommodation policy. Applicants need to make their needs known in advance.