> Markdown version of [/jobs/ext/4542004-principal-engineer-identity-access-management-iam](https://www.wearedevelopers.com/jobs/ext/4542004-principal-engineer-identity-access-management-iam). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Principal Engineer, Identity & Access Management (IAM)

- **Company:** Boston Scientific Corporation
- **Location:** Arden Hills, MN, United States
- **Experience:** Expert
- **Salary:** $102,100 - $194,000
- **Contract:** Permanent contract
- **Skills:** Active Directory, Domain Controllers, Cloud Computing, Cyber Security, Disaster Recovery, Domain Name System (DNS), Identity and Access Management, Kerberos (Protocol), Lightweight Directory Access Protocols (LDAP), Windows PowerShell, Azure Active Directory, Zero Trust Network Access, Cyberark, Information Technology, Performance Monitor, SailPoint
- **Published:** November 3, 2026
- **Apply:** https://jobs.bostonscientific.com/talentcommunity/apply/1447027900/?locale=en_US

## About the Role

* Minimum Bachelor's degree in computer science, information technology, engineering or a related field.
 * Minimum of 7 years' experience in IT infrastructure, identity and access management, directory services engineering or a related technical discipline.
 * Extensive experience designing, engineering, securing and supporting large-scale, enterprise Microsoft Active Directory environments.
 * Advanced expertise in Active Directory Domain Services, forest and domain architecture, DNS, Group Policy, LDAP, Kerberos, replication and trust relationships.
 * Demonstrated experience defining enterprise architecture, establishing engineering standards and leading complex technical initiatives across global environments.
 * Deep knowledge of identity security architecture, privileged access protection, Tier 0 security controls and Zero Trust principles.
 * Proven experience architecting directory resilience, backup and recovery solutions, disaster recovery strategies and business continuity capabilities.
 * Demonstrated ability to evaluate complex technical challenges, make strategic architectural decisions and influence technology direction across multiple IT and cybersecurity functions.
 * Strong communication, stakeholder engagement and technical leadership skills, with the ability to influence decisions without direct reporting authority., * Experience designing and implementing Microsoft Entra ID integrations and hybrid identity architectures.
 * Experience with privileged access management and identity governance platforms such as CyberArk, Saviynt or equivalent technologies.
 * Advanced PowerShell scripting and automation experience supporting enterprise identity infrastructure.
 * Experience developing technical roadmaps, architectural standards and enterprise modernization strategies.
 * Experience working in highly regulated environments, including medical device manufacturing, healthcare or critical infrastructure.
 * Experience mentoring engineers and providing technical leadership across globally distributed teams.

## Description

* Define and drive the enterprise architecture, technical strategy and engineering roadmap for Microsoft Active Directory services across a complex global environment.
 * Serve as the principal technical authority for Active Directory Domain Services, including forest and domain architecture, trusts, replication, Group Policy, DNS, LDAP and Kerberos.
 * Establish and govern enterprise engineering standards, architectural principles, security controls and operational best practices for directory services.
 * Lead strategic Active Directory security initiatives, including Tier 0 protection, privileged access security, identity threat mitigation and Zero Trust architecture alignment.
 * Architect and advance enterprise directory resilience, backup and recovery capabilities, disaster recovery strategies and service continuity frameworks.
 * Provide technical leadership for complex, high-impact infrastructure modernization initiatives, including domain controller lifecycle management, operating system upgrades and platform transformation.
 * Partner with cybersecurity, infrastructure, cloud and IAM leadership to define and implement secure hybrid identity architectures integrating Microsoft Entra ID.
 * Evaluate emerging identity technologies, architectural risks and industry trends to recommend strategic improvements and long-term platform investments.
 * Lead the technical resolution of complex, enterprise-wide directory service challenges, providing architectural guidance and driving sustainable solutions.
 * Champion automation, engineering efficiency, proactive monitoring and continuous improvement to strengthen service reliability, scalability and security.
 * Influence cross-functional technical decisions, establish alignment among stakeholders and communicate architectural recommendations, risks and trade-offs to technical and business leadership.
 * Mentor engineers, provide technical guidance and promote engineering excellence through knowledge sharing, design reviews and architectural governance.