Principal Identity Security Engineer - Natick, Ma

Motion Recruitment; Natick (MA); On-site; USD 180,000 - 280,000; Full time

Benefits offered by this job

Medical Insurance

Dental Benefits

Vision Benefits

Paid Time Off

401(k)

Job summary

Motion Recruitment is seeking a Principal Identity Security Engineer to lead the design, implementation, and security of enterprise identity services across a hybrid environment. You will drive authentication, authorization, and governance strategies while improving platform resilience and automation.

The role requires deep expertise in Active Directory, Entra ID, and privileged access management, with a focus on scalable identity patterns and secure, modern identity architectures.

Qualifications

• 10+ years of experience in Identity and Access Management or related disciplines.
• Strong expertise with Microsoft Active Directory and Microsoft Entra ID.
• Experience designing and supporting hybrid identity environments.
• Deep understanding of authentication, authorization, federation, provisioning, and access management technologies.
• Experience securing privileged access environments and implementing identity security best practices.
• Experience with service principals, managed identities, certificates, secrets, and application permissions.
• Strong automation and scripting using modern engineering practices.
• Experience with APIs, Git-based workflows, and CI/CD pipelines.
• Bachelor's degree or equivalent combination of education and experience.

Responsibilities

• Provide technical leadership for enterprise identity services and platforms.
• Design and enhance authentication, authorization, privileged access, and identity governance capabilities.
• Lead initiatives focused on identity security, platform hardening, and operational resilience.
• Improve automation, standardization, and reliability across identity infrastructure.
• Define scalable identity patterns and architectural guardrails for applications, cloud services, and automation platforms.
• Partner with security, cloud, infrastructure, and application teams to strengthen enterprise-wide identity controls.
• Support recovery planning, threat detection, and continuous improvement efforts across identity platforms.

Skills

Active Directory

Microsoft Entra ID

Hybrid identity

Privileged access management

Identity governance

Non-human identities

Automation scripting

APIs / Git workflows / CI/CD

Bachelor's degree

Education

Bachelor's degree in a related field

Tools

PowerShell

Python

Git

CI/CD tooling

Job description

Job DescriptionA leading technology organization is seeking a Principal Identity Security Engineer to join a team focused on securing and modernizing enterprise identity platforms across a complex hybrid environment.

In this role, you will help drive the strategy, engineering, and security of core identity services including Active Directory, Microsoft Entra ID, privileged access management, identity governance, and non-human identities. You'll collaborate across security, cloud, infrastructure, and application teams to build scalable identity solutions that support business growth while maintaining strong security controls.

This is an opportunity for a senior-level engineer who enjoys solving complex identity challenges, improving platform resilience, and driving automation across critical enterprise services. The ideal candidate combines deep technical expertise with a passion for security, operational excellence, and modern identity architectures.

Required Skills & Experience

• 10+ years of experience in Identity and Access Management, Identity Security, Infrastructure Engineering, or related disciplines
• Strong expertise with Microsoft Active Directory and Microsoft Entra ID
• Experience designing and supporting hybrid identity environments
• Deep understanding of authentication, authorization, federation, provisioning, and access management technologies
• Experience securing privileged access environments and implementing identity security best practices
• Experience with service principals, managed identities, certificates, secrets, and application permissions
• Strong automation and scripting experience using modern engineering practices
• Experience working with APIs, Git-based workflows, and CI/CD pipelines
• Bachelor's degree or equivalent combination of education and experience

Desired Skills & Experience

• Identity Governance and Administration (IGA) experience
• Identity threat detection and response experience
• Disaster recovery and identity resiliency planning expertise
• Familiarity with NIST, ISO 27001, and related security frameworks
• Experience implementing least-privilege access models and application permission governance
• Cloud security and modern identity architecture experience
• Exposure to identity solutions supporting AI-enabled systems and automation platforms

What You Will Be Doing

Daily Responsibilities: 80% Hands-On Engineering / 20% Technical Leadership

• Provide technical leadership for enterprise identity services and platforms
• Design and enhance authentication, authorization, privileged access, and identity governance capabilities
• Lead initiatives focused on identity security, platform hardening, and operational resilience
• Improve automation, standardization, and reliability across identity infrastructure
• Define scalable identity patterns and architectural guardrails for applications, cloud services, and automation platforms
• Partner with security, cloud, infrastructure, and application teams to strengthen enterprise-wide identity controls
• Support recovery planning, threat detection, and continuous improvement efforts across identity platformsDrive best practices for both human and non-human identity management

The Offer

• Competitive base salary
• Annual performance bonus
• Comprehensive benefits package
• High-visibility technical leadership opportunity
• Collaborative engineering culture
• Long-term career growth and advancement opportunities

You will receive the following benefits:

• Medical Insurance
• Dental Benefits
• Vision Benefits
• Paid Time Off (PTO)
• 401(k)

Applicants must be currently authorized to work in the US on a full-time basis now and in the future.