Principal IAM Engineer / Onsite in Natick, MA

Kelly Services; Natick (MA); Hybrid; USD 180,000 - 220,000; Full time

Job summary

Kelly Services is seeking a senior IAM engineer to lead enterprise identity initiatives in a hybrid environment. The role focuses on design, implementation, and hardening of identity systems across cloud and on-premises assets.

Key responsibilities include hands-on platform engineering, architecture leadership, and governance across security and application teams. Collaboration with security, cloud, and IT is essential.

Qualifications

• 10+ years of professional technology experience or equivalent experience, with a bachelor's degree.
• Deep hands-on experience with Microsoft Active Directory.
• Strong hands-on experience with Microsoft Entra ID.
• Enterprise experience with hybrid identity, authentication, federation, and provisioning.
• Strong knowledge of IAM architecture and enterprise identity platform engineering.
• Experience securing and hardening Active Directory and cloud identity environments.
• Experience with privileged access, administrative tiering, and least-privilege security models.
• IAM automation experience using scripting and APIs.
• Experience implementing engineering practices through Git-based workflows and CI/CD.
• Understanding of identity resilience, operational readiness, disaster recovery, and recovery planning.
• Ability to provide technical leadership while remaining highly hands-on.

Responsibilities

• Hands-on identity platform engineering, automation, and implementation.
• Architecture and technical leadership for enterprise identity services.
• Security hardening, resilience, threat detection, and recovery planning.
• Cross-functional collaboration, governance, and engineering standards.

Skills

IAM leadership

Hybrid identity engineering

Scripting & APIs

CI/CD workflows

Security governance

Disaster recovery planning

Technical leadership

Threat detection

Cloud identity

Education

Bachelor's degree in a technical field

Tools

Microsoft Active Directory

Microsoft Entra ID

Git

Job description

$180000 - $220000

Required Skills & Experience

• 10+ years of professional technology experience or equivalent experience, with a bachelor's degree
• Deep hands-on experience with Microsoft Active Directory
• Strong hands-on experience with Microsoft Entra ID
• Enterprise experience with hybrid identity, authentication, federation, and provisioning
• Strong knowledge of IAM architecture and enterprise identity platform engineering
• Experience securing and hardening Active Directory and cloud identity environments
• Experience with privileged access, administrative tiering, and least-privilege security models
• IAM automation experience using scripting and APIs
• Experience implementing engineering practices through Git-based workflows and CI/CD
• Understanding of identity resilience, operational readiness, disaster recovery, and recovery planning
• Ability to provide technical leadership while remaining highly hands-on

Desired Skills & Experience

• Experience managing non-human and workload identities, including service principals, managed identities, certificates, secrets, and federated credentials
• Experience with application registrations, delegated permissions, application permissions, and consent models
• Identity Threat Detection and Response experience
• Configuration-as-code and automated identity platform management experience
• Knowledge of security and regulatory frameworks such as NIST and ISO 27001
• Experience establishing identity engineering standards and guardrails across enterprise environments
• Familiarity with identity patterns for AI-enabled systems, automation platforms, and agentic workflows
• Strong cross-functional communication skills and experience partnering with security, cloud, infrastructure, IT, and application engineering teams

What You Will Be Doing

Tech Breakdown

• 35% Active Directory and hybrid identity engineering
• 30% Microsoft Entra ID and cloud identity
• 20% IAM security, privileged access, and identity governance
• 15% Automation, APIs, Git workflows, and CI/CD

Daily Responsibilities

• 40% Hands-on identity platform engineering, automation, and implementation
• 25% Architecture and technical leadership for enterprise identity services
• 20% Security hardening, resilience, threat detection, and recovery planning
• 15% Cross-functional collaboration, governance, and engineering standards

The Offer

• Full-time employment
• Hybrid schedule with 3 days onsite per week in Natick, MA
• Opportunity to provide technical leadership over critical enterprise identity platforms and security initiatives
• Exposure to modern identity challenges spanning cloud, on-premises infrastructure, application identities, automation, and AI-enabled systems

Motion Recruitment Partners (MRP) is an Equal Opportunity Employer. All applicants must be currently authorized to work on a full-time basis in the country for which they are applying, and no sponsorship is currently available. Employment is subject to the successful completion of a pre-employment screening. Accommodation will be provided in all parts of the hiring process as required under MRP's Employment Accommodation policy. Applicants need to make their needs known in advance.