Lead IAM Developer - Entra ID/Active Directory/Python - Newton, Ma

Motion Recruitment; Newton Lower Falls (MA); Hybrid; USD 180,000 - 220,000; Full time

Benefits offered by this job

Medical Insurance

Dental Benefits

Vision Benefits

Paid Time Off (PTO)

401(k) with company match

Job summary

Motion Recruitment is seeking a Lead IAM Developer to lead the design, development, and continuous improvement of enterprise identity and access management solutions. The role combines deep identity expertise with hands-on software development and automation to strengthen security and support a modern hybrid workforce.

The ideal candidate will lead with Microsoft Entra ID and Active Directory expertise, along with strong coding and automation capabilities.

Qualifications

• 8+ years of IAM experience in enterprise environments.
• Strong expertise with Microsoft Entra ID (Azure AD) and Active Directory.
• Experience developing and automating IAM solutions and workflows.

Responsibilities

• Design, develop, and maintain enterprise IAM solutions and services.
• Lead modernization of Entra ID and Active Directory environments.
• Build automated workflows to improve provisioning and governance.

Skills

IAM

Microsoft Entra ID

Active Directory

PowerShell

Python

C#

SSO

MFA

RBAC

Zero Trust

Tools

CyberArk

BeyondTrust

OAuth 2.0

Job description

Job Description A growing organization is seeking a Lead IAM Developer to lead the design, development, and continuous improvement of enterprise identity and access management solutions. This role combines deep identity expertise with hands-on software development and automation responsibilities to strengthen security, streamline operations, and support a modern hybrid workforce.

The ideal candidate will be a technical leader with extensive experience in Microsoft Entra ID and Active Directory, along with strong coding and automation capabilities. You will drive initiatives that improve identity governance, automate access management workflows, enhance authentication security, and reduce operational overhead through scalable engineering solutions.

This is a hybrid position based in Newton, MA, offering a salary of up to $200,000.

Required Skills & Experience

• 8+ years of experience in Identity and Access Management (IAM)
• Strong expertise with Microsoft Entra ID (Azure AD) and Active Directory
• Proven experience developing and automating IAM solutions in enterprise environments
• Advanced scripting and programming skills with PowerShell, Python, C#, or similar languages
• Experience building APIs, automation frameworks, and identity-related integrations
• Strong understanding of SSO, MFA, Conditional Access, RBAC, and Privileged Identity Management (PIM)
• Experience with identity lifecycle management, including provisioning and deprovisioning
• Knowledge of Zero Trust architecture and modern authentication protocols
• Experience securing hybrid identity environments
• Strong understanding of LDAP, Kerberos, SAML, OAuth 2.0, and OpenID Connect
• Experience implementing IAM security controls and governance standards
• Excellent troubleshooting, communication, and leadership skills

Desired Skills & Experience

• Experience with Identity Governance and Administration (IGA) platforms
• Experience with PAM technologies such as CyberArk, BeyondTrust, or related solutions
• Familiarity with Azure, AWS, and cloud-native identity services
• Knowledge of infrastructure-as-code and DevOps practices
• Experience integrating IAM solutions with HR, ERP, and business applications
• Exposure to SIEM platforms and security monitoring tools
• Microsoft, CISSP, CISM, or related security certifications
• Previous experience mentoring engineers or leading IAM development teams

What You Will Be Doing Daily Responsibilities

• Design, develop, and maintain enterprise IAM solutions and services
• Lead the modernization and optimization of Microsoft Entra ID and Active Directory environments
• Build automated workflows that improve access provisioning, governance, and operational efficiency
• Develop custom integrations, APIs, and identity management tools
• Implement and enhance SSO, MFA, Conditional Access, and identity governance capabilities
• Improve security posture through automation, policy enforcement, and continuous monitoring
• Partner with security, infrastructure, and application teams to deliver scalable IAM solutions
• Develop solutions that support Zero Trust and least-privilege access strategies
• Identify opportunities to eliminate manual processes through engineering and automation
• Troubleshoot complex authentication, authorization, and directory services issues
• Establish IAM development standards, best practices, and documentation
• Mentor junior engineers and provide technical leadership across IAM initiatives

The Offer

• Competitive base salary up to $200,000
• Annual bonus opportunity
• Hybrid work schedule in Newton, MA
• Opportunity to lead strategic identity and security initiatives
• High-impact role with significant influence on enterprise security architecture

you will receive the following benefits

• Medical Insurance
• Dental Benefits
• Vision Benefits
• Paid Time Off (PTO)
• 401(k) with company match

Applicants must be currently authorized to work in the US on a full-time basis now and in the future.

Posted By: Nick Ramler