> Markdown version of [/jobs/ext/4589736-principal-engineer-identity-access-management-iam-microsoft-entra-id](https://www.wearedevelopers.com/jobs/ext/4589736-principal-engineer-identity-access-management-iam-microsoft-entra-id). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Principal Engineer, Identity & Access Management (IAM) - Microsoft Entra ID - **Company:** Boston Scientific Corporation - **Location:** Mounds View, MN, United States - **Experience:** Expert - **Salary:** $102,100.0 - $194,000.0 - **Contract:** Permanent contract - **Skills:** Active Directory, Application Programming Interfaces (APIs), User Authentication, Microsoft Azure, Microsoft Online Services, Cloud Computing Security, Cloud Engineering, CompTIA Security+, Cyber Security, Multi-Factor Authentication, EHealth, Identity and Access Management, Information Systems Security Architecture Professional, Network Segmentation, OAuth, Windows PowerShell, Software Architecture, Role-Based Access Control, Openid Connect, Azure Active Directory, Zero Trust Network Access, Security Assertion Markup Language (SAML), Security Information and Event Management, Single Sign-On, Systems Integration, Software Technical Review, Data Logging, Enterprise Software Applications, Cyberark, Technical Debt, Infrastructure as Code (IaC), Customer Identity Access Management, Information Technology, Enterprise Integration, SailPoint, Restful APIs, Terraform, Splunk - **Published:** November 5, 2026 - **Apply:** https://www.dice.com/job-detail/1e99738a-64c2-4943-a9c5-7b9352a49b06 ## About the Role * Minimum Bachelor's degree in computer science, information technology, engineering, cybersecurity or a related field. * Minimum of 7 years' experience in identity and access management, cloud identity engineering, cybersecurity architecture or a related technical discipline. * Hands-on experience designing, engineering and securing Microsoft Entra ID environments within complex, large-scale enterprises. * Advanced expertise in Microsoft Entra ID, Conditional Access, MFA, passwordless authentication, enterprise applications, PIM and cloud identity architecture. * Strong knowledge of modern authentication and authorization technologies, including SAML, OAuth 2.0, OpenID Connect, Microsoft Graph, Azure RBAC, service principals, managed identities and workload identities. * Demonstrated experience designing and securing enterprise application integrations, external identity solutions, cross-tenant access and cloud identity services. * Experience automating identity infrastructure and engineering processes using PowerShell, Microsoft Graph APIs, REST APIs, Terraform or comparable technologies. * Deep understanding of Zero Trust architecture, least privilege, privileged identity security, identity tiering and modern authentication security principles. * Experience establishing identity logging, monitoring, auditing and operational security controls for enterprise identity platforms. * Demonstrated ability to define technical architecture, establish engineering standards and lead complex, cross-functional initiatives across multiple technology organizations. * Advanced troubleshooting and problem-solving skills across identity, authentication, federation, authorization and cloud environments. * Ability to evaluate complex identity solutions from cybersecurity, operational resilience, scalability and business continuity perspectives. * Strong communication and technical leadership skills, with the ability to influence architectural decisions, translate business requirements into engineering solutions and mentor engineers without direct reporting authority., * Experience with on-premises Microsoft Active Directory and hybrid AD/Entra identity architectures, including synchronization, authentication dependencies, security boundaries and privileged identity considerations. * Knowledge of Active Directory security, administrative tiering, Tier 0 protection and directory hardening. * Experience delivering IAM or cybersecurity solutions within medical device manufacturing, healthcare, pharmaceutical, manufacturing or other highly regulated environments. * Experience designing secure identity architectures supporting manufacturing systems and operational technology environments. * Knowledge of IT/OT security architecture, network segmentation, legacy-system integration, high-availability manufacturing environments and hybrid identity dependencies. * Experience integrating Microsoft Entra ID with CyberArk, Saviynt or comparable privileged access management and identity governance platforms. * Experience with Splunk or comparable SIEM technologies supporting identity monitoring, auditing, security detection and investigation. * Advanced experience with Microsoft Entra External ID, B2B collaboration, Entitlement Management, Identity Protection, workload identities and cross-tenant access. * Experience supporting authentication and identity integration for customer-facing applications, Digital Health platforms, partner ecosystems or CIAM environments. * Familiarity with complementary IAM and security technologies, including Yubico, DigiCert, 1Password, Ping Identity or CrowdStrike Falcon Identity. * Knowledge of cybersecurity frameworks and industry standards, including the NIST Cybersecurity Framework, NIST SP 800-82, IEC 62443 and Zero Trust principles. * Relevant Microsoft identity, cloud architecture or cybersecurity certifications. ## Description * Define and drive the enterprise architecture, technical strategy and engineering roadmap for Microsoft Entra ID and cloud identity services across a complex global environment. * Serve as a principal technical authority for Microsoft Entra ID, authentication, authorization, federation and cloud identity architecture, providing guidance on complex technical decisions and enterprise integration patterns. * Architect and advance enterprise identity security controls, including Conditional Access, multifactor authentication (MFA), passwordless authentication, Identity Protection, Privileged Identity Management (PIM) and Zero Trust principles. * Establish secure administrative and privileged identity models aligned with least privilege, identity tiering, privileged access protection and enterprise cybersecurity standards. * Define architectural standards and secure integration patterns between Microsoft Entra ID and on-premises Active Directory, partnering with directory engineering teams to manage hybrid identity dependencies and security boundaries. * Lead the design of secure identity and authentication solutions supporting corporate IT, cloud platforms and manufacturing/OT environments, balancing cybersecurity requirements with operational resilience, availability and business continuity. * Establish enterprise integration standards for single sign-on (SSO), SAML, OAuth 2.0, OpenID Connect, application registrations, API permissions, service principals, managed identities and workload identities. * Partner with Digital Health, customer identity and access management (CIAM), and application teams to define secure authentication and authorization architectures for customer-facing applications, partner access and external identity solutions. * Define secure integration patterns across Microsoft Entra ID, Saviynt, CyberArk and the broader enterprise IAM ecosystem. * Establish architectural and engineering standards for Azure role-based access control (RBAC), external identities, business-to-business (B2B) collaboration, cross-tenant access, privileged cloud identities and emergency access. * Drive engineering automation and infrastructure modernization using Microsoft Graph, PowerShell, REST APIs, Terraform and infrastructure as code (IaC) technologies. * Define enterprise identity logging, monitoring, auditing and telemetry requirements, partnering with Security Operations to integrate identity security signals into security information and event management (SIEM) platforms, including Splunk. * Lead complex technical design reviews, root-cause investigations, identity resilience and recovery initiatives, and strategic platform modernization efforts. * Serve as a senior technical escalation point for complex identity, authentication, federation, authorization and cloud security challenges, driving sustainable enterprise solutions. * Establish and govern engineering standards, architectural documentation, operating procedures, configuration baselines, technical runbooks and troubleshooting practices to ensure consistent service delivery. * Identify systemic platform risks, technical debt and opportunities for automation, continuous improvement and operational efficiency. * Influence cross-functional architectural decisions, communicate technical risks and trade-offs, and align engineering solutions with enterprise cybersecurity and business objectives. * Mentor IAM engineers through architectural guidance, technical design reviews, knowledge sharing and hands-on coaching, fostering engineering excellence and continuous improvement.