Principal IAM Engineer — Enterprise Identity & Security

Kelly Services; Natick (MA); On-site; USD 130,000 - 200,000; Full time

Benefits offered by this job

Medical Insurance

Dental Benefits

Vision Benefits

Paid Time Off (PTO)

401(k)

Job summary

Kelly Services is seeking a Principal IAM/Active Directory Engineer in the Natick, MA area to provide technical leadership across enterprise identity platforms and security services. The role shapes strategy, architecture, security, and operations for IAM across a complex enterprise.

You will drive improvements in AD, Entra ID, hybrid identity, privileged access, and identity governance while partnering with security, cloud, and infrastructure teams to deliver scalable and secure identity

Qualifications

• Bachelor's degree and 10+ years of professional experience or equivalent practical experience
• Deep expertise with Active Directory and Microsoft Entra ID
• Strong background supporting hybrid identity environments
• Experience designing authentication, authorization, and identity governance solutions
• Knowledge of privileged access management and identity security best practices
• Experience with identity threat detection, recovery planning, and platform hardening
• Strong automation and scripting capabilities
• Experience with APIs, Infrastructure as Code, and Git-based development workflows
• Hands-on experience with CI/CD methodologies and operational automation
• Knowledge of service principals, managed identities, certificates, secrets, and federated credentials
• Experience designing least-privilege access models and application permission governance

Responsibilities

• Provide technical leadership for enterprise identity and access management platforms
• Design and enhance authentication, authorization, and identity governance capabilities
• Improve the security, resilience, and recoverability of identity infrastructure
• Lead platform hardening, threat detection, and operational readiness initiatives
• Drive automation efforts to improve reliability, consistency, and scalability
• Develop identity architecture standards for applications, services, and cloud platforms
• Partner with security, engineering, and infrastructure teams on strategic identity initiatives
• Create and maintain engineering best practices across IAM technologies
• Support governance and compliance requirements related to identity security
• Mentor team members and influence long-term identity strategy

Skills

Active Directory

Microsoft Entra ID

Hybrid identity

Identity governance

Automation scripting

CI/CD

APIs

Infrastructure as Code

Education

Bachelor's degree

Tools

APIs

Infrastructure as Code

Git

CI/CD

Job description

Kelly Services is seeking a Principal IAM/Active Directory Engineer in the Natick, MA area to provide technical leadership across enterprise identity platforms and security services. The role shapes strategy, architecture, security, and operations for IAM across a complex enterprise.

You will drive improvements in AD, Entra ID, hybrid identity, privileged access, and identity governance while partnering with security, cloud, and infrastructure teams to deliver scalable and secure identity