About this opportunity
Motion Recruitment lists this Principal IAM Engineer opportunity in natick, Massachusetts. Review the employer’s description below for duties, qualifications and application requirements.
Job description
Job DescriptionA well-established technology organization is seeking a Principal IAM/Active Directory Engineer to provide technical leadership across enterprise identity platforms and security services. This role will play a critical part in shaping the strategy, architecture, security, and operational excellence of identity and access management capabilities across a complex enterprise environment.
The ideal candidate will be responsible for driving improvements across Active Directory, Microsoft Entra ID, hybrid identity, privileged access, identity governance, and non-human identities. This position partners closely with security, cloud, infrastructure, and application teams to ensure scalable, secure, and resilient identity services that support business growth and modernization initiatives.
This is a highly visible engineering role focused on strengthening identity security, driving automation, and establishing best practices across the organization's identity ecosystem.
Required Skills & Experience
Bachelor's degree and 10+ years of professional experience or equivalent practical experience
Deep expertise with Active Directory and Microsoft Entra ID
Strong background supporting hybrid identity environments
Experience designing authentication, authorization, and identity governance solutions
Knowledge of privileged access management and identity security best practices
Experience with identity threat detection, recovery planning, and platform hardening
Strong automation and scripting capabilities
Experience with APIs, Infrastructure as Code, and Git-based development workflows
Hands-on experience with CI/CD methodologies and operational automation
Knowledge of service principals, managed identities, certificates, secrets, and federated credentials
Experience designing least-privilege access models and application permission governance
Desired Skills & Experience
Experience supporting large-scale enterprise IAM environments
Familiarity with federation, provisioning, and modern authentication technologies
Knowledge of NIST, ISO 27001, and related security frameworks
Experience with cloud security and application identity architecture
Exposure to identity strategies supporting AI-enabled systems and automation platforms
Experience building enterprise-wide identity standards, guardrails, and governance models
What You Will Be Doing
Daily Responsibilities
Provide technical leadership for enterprise identity and access management platforms
Design and enhance authentication, authorization, and identity governance capabilities
Improve the security, resilience, and recoverability of identity infrastructure
Lead platform hardening, threat detection, and operational readiness initiatives
Drive automation efforts to improve reliability, consistency, and scalability
Develop identity architecture standards for applications, services, and cloud platforms
Partner with security, engineering, and infrastructure teams on strategic identity initiatives
Create and maintain engineering best practices across IAM technologies
Support governance and compliance requirements related to identity security
Mentor team members and influence long‑term identity strategy
The Offer
Base salary up to $200,000
Competitive bonus potential
Opportunity to lead enterprise‑scale IAM modernization initiatives
Collaborative and security‑focused engineering environment
You will receive the following benefits
Medical Insurance
Dental Benefits
Vision Benefits
Paid Time Off (PTO)
401(k)
Applicants must be currently authorized to work in the US on a full‑time basis now and in the future.
#J-18808-Ljbffr
Worksite address
natick, MA, 01760, US
Who can apply
Review the original listing for work authorization, qualifications and employer requirements.