Principal IAM Engineer — Enterprise Directory & Hybrid Identity

Boston Scientific

Arden Hills (MN)

Hybrid

USD 102,000 - 194,000

Full time

3 days ago

Be an early applicant

Get a reply from this employer

Your resume and cover letter, tailored to exactly what they’re hiring for.

Get past ATS filters

Job summary

Boston Scientific seeks a Principal Engineer for Identity & Access Management (IAM) focused on Microsoft Active Directory. You will lead architecture, security, and modernization of global directory services, shaping enterprise standards and driving hybrid identity initiatives across IT and cybersecurity teams.

The role requires deep AD expertise, strategic thinking and strong collaboration, with hybrid work and global impact on critical systems.

Qualifications

Bachelor’s degree in computer science, IT, engineering or related field.
7+ years in IT infrastructure, IAM, directory services or related discipline.
Extensive experience designing and supporting large-scale Microsoft Active Directory environments.
Advanced expertise in AD DS, forest/domain architecture, DNS, Group Policy, LDAP, Kerberos, replication and trust.

Responsibilities

Define enterprise architecture, technical strategy and engineering roadmap for AD services across a global environment.
Serve as principal technical authority for AD DS, including forest and domain architecture, trusts, replication, Group Policy, DNS, LDAP and Kerberos.
Establish and govern engineering standards, architectural principles, security controls and operational best practices for directory services.
Lead strategic Active Directory security initiatives, including Tier 0 protection, privileged access security, identity threat mitigation and Zero Trust architecture alignment.
Architect and advance enterprise directory resilience, backup and recovery capabilities, disaster recovery strategies and service continuity frameworks.
Provide technical leadership for complex, high-impact infrastructure modernization initiatives, including domain controller lifecycle management, OS upgrades and platform transformation.
Partner with cybersecurity, infrastructure, cloud and IAM leadership to define and implement secure hybrid identity architectures integrating Microsoft Entra ID.
Mentor engineers, provide technical guidance and promote engineering excellence through knowledge sharing and governance.