Principal IAM Architect | Entra ID & Cloud Identity

Boston Scientific; Marlborough (MA); In loco; USD 102.000 - 194.000; Tempo pieno

Descrizione del lavoro

Boston Scientific is seeking a Principal Engineer for Identity & Access Management (IAM) to lead architecture and modernization of cloud identity services. The role focuses on Microsoft Entra ID, MFA, SSO and Zero Trust across global IT, manufacturing and OT environments.

You will drive security controls, mentor IAM engineers, and collaborate with cybersecurity, cloud and CIAM teams to deliver scalable identity solutions that support healthcare innovations.

Competenze

• Minimum Bachelor's degree in computer science, information technology, engineering, cybersecurity or a related field.
• Minimum of 7 years' experience in identity and access management, cloud identity engineering, cybersecurity architecture or a related technical discipline.
• Hands‑on experience designing, engineering and securing Microsoft Entra ID environments within complex, large‑scale enterprises.
• Advanced expertise in Microsoft Entra ID, Conditional Access, MFA, passwordless authentication, enterprise applications, PIM and cloud identity architecture.
• Strong knowledge of modern authentication and authorization technologies, including SAML, OAuth 2.0, OpenID Connect, Microsoft Graph, Azure RBAC, service principals, managed identities and workload identities.
• Demonstrated experience designing and securing enterprise application integrations, external identity solutions, cross‑tenant access and cloud identity services.
• Experience automating identity infrastructure and engineering processes using PowerShell, Microsoft Graph APIs, REST APIs, Terraform or comparable technologies.
• Deep understanding of Zero Trust architecture, least privilege, privileged identity security, identity tiering and modern authentication security principles.
• Experience establishing identity logging, monitoring, auditing and operational security controls for enterprise identity platforms.
• Demonstrated ability to define technical architecture, establish engineering standards and lead complex, cross‑functional initiatives across multiple technology organizations.
• Advanced troubleshooting and problem‑solving skills across identity, authentication, federation, authorization and cloud environments.
• Ability to evaluate complex identity solutions from cybersecurity, operational resilience, scalability and business continuity perspectives.
• Strong communication and technical leadership skills, with the ability to influence architectural decisions, translate business requirements into engineering solutions and mentor engineers without direct reporting authority.

Mansioni

• Define and drive the enterprise architecture, technical strategy and engineering roadmap for Microsoft Entra ID and cloud identity services across a complex global environment.
• Serve as a principal technical authority for Microsoft Entra ID, authentication, authorization, federation and cloud identity architecture, providing guidance on complex technical decisions and enterprise integration patterns.
• Architect and advance enterprise identity security controls, including Conditional Access, multifactor authentication (MFA), passwordless authentication, Identity Protection, Privileged Identity Management (PIM) and Zero Trust principles.
• Establish secure administrative and privileged identity models aligned with least privilege, identity tiering, privileged access protection and enterprise cybersecurity standards.
• Define architectural standards and secure integration patterns between Microsoft Entra ID and on‑premises Active Directory, partnering with directory engineering teams to manage hybrid identity dependencies and security boundaries.
• Lead the design of secure identity and authentication solutions supporting corporate IT, cloud platforms and manufacturing/OT environments, balancing cybersecurity requirements with operational resilience, availability and business continuity.
• Establish enterprise integration standards for single sign‑on (SSO), SAML, OAuth 2.0, OpenID Connect, application registrations, API permissions, service principals, managed identities and workload identities.
• Partner with Digital Health, customer identity and access management (CIAM), and application teams to define secure authentication and authorization architectures for customer‑facing applications, partner access and external identity solutions.
• Define secure integration patterns across Microsoft Entra ID, Saviynt, CyberArk and the broader enterprise IAM ecosystem.
• Establish architectural and engineering standards for Azure role‑based access control (RBAC), external identities, business‑to‑business (B2B) collaboration, cross‑tenant access, privileged cloud identities and emergency access.
• Drive engineering automation and infrastructure modernization using Microsoft Graph, PowerShell, REST APIs, Terraform and infrastructure as code (IaC) technologies.
• Define enterprise identity logging, monitoring, auditing and telemetry requirements, partnering with Security Operations to integrate identity security signals into security information and event management (SIEM) platforms, including Splunk.
• Lead complex technical design reviews, root‑cause investigations, identity resilience and recovery initiatives, and strategic platform modernization efforts.
• Serve as a senior technical escalation point for complex identity, authentication, federation, authorization and cloud security challenges, driving sustainable enterprise solutions.
• Establishand govern engineering standards, architectural documentation, operating procedures, configuration baselines, technical runbooks and troubleshooting practices to ensure consistent service delivery.
• Identify systemic platform risks, technical debt and opportunities for automation, continuous improvement and operational efficiency.
• Influence cross‑functional architectural decisions, communicate technical risks and trade‑offs, and align engineering solutions with enterprise cybersecurity and business objectives.
• Mentor IAM engineers through architectural guidance, technical design reviews, knowledge sharing and hands‑on coaching, fostering engineering excellence and continuous improvement.

Conoscenze

Microsoft Entra ID

MFA

Passwordless authentication

SAML

OAuth 2.0

OpenID Connect

PowerShell

Terraform

Cloud identity architecture

Microsoft Graph

Azure RBAC

REST APIs

Saviynt

CyberArk

Formazione

Bachelor's degree in computer science, information technology, engineering, cybersecurity or related field

Strumenti

Microsoft Graph

Azure RBAC

Terraform

REST APIs

Saviynt

CyberArk

Descrizione del lavoro

Boston Scientific is seeking a Principal Engineer for Identity & Access Management (IAM) to lead architecture and modernization of cloud identity services. The role focuses on Microsoft Entra ID, MFA, SSO and Zero Trust across global IT, manufacturing and OT environments.

You will drive security controls, mentor IAM engineers, and collaborate with cybersecurity, cloud and CIAM teams to deliver scalable identity solutions that support healthcare innovations.