Principal Identity Security Engineer - Natick, Ma

Kelly Services; Natick (MA); On-site; USD 150,000 - 200,000; Full time

Benefits offered by this job

Competitive base salary

Annual performance bonus

Comprehensive benefits package

High-visibility technical leadership

Collaborative engineering culture

Long-term career growth

Job summary

Motion Recruitment Partners (MRP) is seeking a Principal Identity Security Engineer to lead security and modernization of enterprise identity platforms across a complex hybrid environment. You will influence strategy and hands-on engineering for AD, Entra ID, PAM, identity governance, and non-human identities.

The ideal candidate has 10+ years in Identity and Access Management, deep AD and Entra ID expertise, and a track record in hybrid identity, automation, and secure architecture.

Qualifications

• 10+ years of experience in Identity and Access Management or related fields.
• Deep expertise with Microsoft Active Directory and Microsoft Entra ID.
• Experience designing hybrid identity environments.
• Strong understanding of authentication, authorization, federation, provisioning and access management.

Responsibilities

• Lead enterprise identity services strategy and hands-on engineering.
• Design and enhance authentication, authorization, privileged access, and identity governance capabilities.
• Drive identity security initiatives, platform hardening, and operational resilience.
• Improve automation and reliability across identity infrastructure.

Skills

IAM experience

Active Directory

Entra ID

Hybrid identity

Authentication & authorization

Privileged access security

Service principals

Automation & scripting

APIs & CI/CD pipelines

Education

Bachelor's degree or equivalent

Job description

$150000 - $200000

Job DescriptionA leading technology organization is seeking a Principal Identity Security Engineer to join a team focused on securing and modernizing enterprise identity platforms across a complex hybrid environment.

In this role, you will help drive the strategy, engineering, and security of core identity services including Active Directory, Microsoft Entra ID, privileged access management, identity governance, and non-human identities. You'll collaborate across security, cloud, infrastructure, and application teams to build scalable identity solutions that support business growth while maintaining strong security controls.

This is an opportunity for a senior-level engineer who enjoys solving complex identity challenges, improving platform resilience, and driving automation across critical enterprise services. The ideal candidate combines deep technical expertise with a passion for security, operational excellence, and modern identity architectures.

Required Skills & Experience

• 10+ years of experience in Identity and Access Management, Identity Security, Infrastructure Engineering, or related disciplines

• Strong expertise with Microsoft Active Directory and Microsoft Entra ID

• Experience designing and supporting hybrid identity environments

• Deep understanding of authentication, authorization, federation, provisioning, and access management technologies

• Experience securing privileged access environments and implementing identity security best practices

• Experience with service principals, managed identities, certificates, secrets, and application permissions

• Strong automation and scripting experience using modern engineering practices

• Experience working with APIs, Git-based workflows, and CI/CD pipelines

• Bachelor's degree or equivalent combination of education and experience

Desired Skills & Experience

• Identity Governance and Administration (IGA) experience

• Identity threat detection and response experience

• Disaster recovery and identity resiliency planning expertise

• Familiarity with NIST, ISO 27001, and related security frameworks

• Experience implementing least-privilege access models and application permission governance

• Cloud security and modern identity architecture experience

• Exposure to identity solutions supporting AI-enabled systems and automation platforms

What You Will Be Doing

Daily Responsibilities: 80% Hands-On Engineering / 20% Technical Leadership

• Provide technical leadership for enterprise identity services and platforms

• Design and enhance authentication, authorization, privileged access, and identity governance capabilities

• Lead initiatives focused on identity security, platform hardening, and operational resilience

• Improve automation, standardization, and reliability across identity infrastructure

• Define scalable identity patterns and architectural guardrails for applications, cloud services, and automation platforms

• Partner with security, cloud, infrastructure, and application teams to strengthen enterprise-wide identity controls

• Support recovery planning, threat detection, and continuous improvement efforts across identity platforms

• Drive best practices for both human and non-human identity management

The Offer

• Competitive base salary

• Annual performance bonus

• Comprehensive benefits package

• High-visibility technical leadership opportunity

• Collaborative engineering culture

• Long-term career growth and advancement opportunities

You will receive the following benefits:

• Medical Insurance

• Dental Benefits

• Vision Benefits

• Paid Time Off (PTO)

• 401(k)

Applicants must be currently authorized to work in the US on a full-time basis now and in the future.

Motion Recruitment Partners (MRP) is an Equal Opportunity Employer. All applicants must be currently authorized to work on a full-time basis in the country for which they are applying, and no sponsorship is currently available. Employment is subject to the successful completion of a pre-employment screening. Accommodation will be provided in all parts of the hiring process as required under MRP’s Employment Accommodation policy. Applicants need to make their needs known in advance.