Principal IAM Architect: Active Directory & Zero Trust

Boston Scientific; Marlborough (MA); Hybrid; USD 102,000 - 194,000; Full time

Job summary

Boston Scientific is seeking a Principal Engineer, Identity & Access Management (IAM), specializing in Microsoft Active Directory to drive enterprise-level architecture, security, resilience and modernization of global directory services.

As a principal technical contributor, you will set the vision and standards for AD services and partner with cybersecurity, infrastructure, IAM and cloud teams to deliver secure, scalable identity solutions worldwide.

Qualifications

• Bachelor's degree in computer science, IT, engineering or related field.
• 7+ years of IT infrastructure, identity and access management, directory services engineering or related technical discipline.
• Extensive experience designing, engineering, securing and supporting large-scale, enterprise Microsoft Active Directory environments.
• Advanced expertise in Active Directory Domain Services, forest and domain architecture, DNS, Group Policy, LDAP, Kerberos, replication and trust relationships.
• Demonstrated experience defining enterprise architecture, establishing engineering standards and leading complex technical initiatives across global environments.
• Deep knowledge of identity security architecture, privileged access protection, Tier 0 security controls and Zero Trust principles.
• Proven experience architecting directory resilience, backup and recovery solutions, disaster recovery strategies and business continuity capabilities.
• Demonstrated ability to evaluate complex technical challenges, make strategic architectural decisions and influence technology direction across multiple IT and cybersecurity functions.
• Strong communication, stakeholder engagement and technical leadership skills, with the ability to influence decisions without direct reporting authority.

Responsibilities

• Define and drive the enterprise architecture, technical strategy and engineering roadmap for Microsoft Active Directory services across a complex global environment.
• Serve as the principal technical authority for Active Directory Domain Services, including forest and domain architecture, trusts, replication, Group Policy, DNS, LDAP and Kerberos.
• Establish and govern enterprise engineering standards, architectural principles, security controls and operational best practices for directory services.
• Lead strategic Active Directory security initiatives, including Tier 0 protection, privileged access security, identity threat mitigation and Zero Trust architecture alignment.
• Architect and advance enterprise directory resilience, backup and recovery capabilities, disaster recovery strategies and service continuity frameworks.
• Provide technical leadership for complex, high-impact infrastructure modernization initiatives, including domain controller lifecycle management, operating system upgrades and platform transformation.
• Partner with cybersecurity, infrastructure, cloud and IAM leadership to define and implement secure hybrid identity architectures integrating Microsoft Entra ID.
• Evaluate emerging identity technologies, architectural risks and industry trends to recommend strategic improvements and long-term platform investments.
• Lead the technical resolution of complex, enterprise-wide directory service challenges, providing architectural guidance and driving sustainable solutions.
• Champion automation, engineering efficiency, proactive monitoring and continuous improvement to strengthen service reliability, scalability and security.
• Influence cross-functional technical decisions, establish alignment among stakeholders and communicate architectural recommendations, risks and trade-offs to technical and business leadership.
• Mentor engineers, provide technical guidance and promote engineering excellence through knowledge sharing, design reviews and architectural governance.

Skills

Active Directory

Identity & Access Management

Security architecture

Hybrid identity

Leadership

Education

Bachelor's degree in computer science, IT, engineering or related field

Tools

PowerShell

Microsoft Entra ID

Job description

Boston Scientific is seeking a Principal Engineer, Identity & Access Management (IAM), specializing in Microsoft Active Directory to drive enterprise-level architecture, security, resilience and modernization of global directory services.

As a principal technical contributor, you will set the vision and standards for AD services and partner with cybersecurity, infrastructure, IAM and cloud teams to deliver secure, scalable identity solutions worldwide.