Senior IAM Architect - Authentication Platform & Zero Trust

3M Vietnam; Austin (TX); Ibrido; USD 165.000 - 201.000; Tempo pieno

Vantaggi offerti da questo lavoro

Medical

Dental & Vision

Health Savings Account

Flexible Spending Accounts

Disability Benefits

Life Insurance

Retirement Benefits

Paid Absences

Descrizione del lavoro

3M is seeking a Principal Authentication Services Engineer to own enterprise authentication platform architecture across a global environment, influencing IAM standards and Zero Trust strategies. You will design, implement, and govern SSO, MFA, and CA across SaaS and on‑prem/integrated applications.

The role requires deep experience with Entra ID, AD, SAML/OIDC/OAuth, and FIDO2, with a track record of leading complex architectural initiatives. Hybrid work options apply in Maplewood or Austin.

Competenze

• Bachelor’s degree or higher completed prior to start.
• Eight (8) years of experience designing, deploying, and managing enterprise Identity and Access Management (IAM) solutions in diverse environments.
• Five (5) years of experience with modern authentication protocols including SAML, OAuth 2.0, OpenID Connect (OIDC), and FIDO2.
• Five (5) years of leading architectural initiatives, conditional access hardening, or Zero Trust programs.

Mansioni

• Own the architecture, engineering, and lifecycle management of enterprise authentication platforms across a complex global environment.
• Engineer and manage MFA policies, authentication method configurations, and phishing-resistant credential adoption (FIDO2, Windows Hello for Business, certificate-based auth)
• Lead Conditional Access policy development, testing, and governance.
• Define authentication standards, patterns, and reference architectures for new and existing applications; keep them current.
• Maintain technical documentation including architecture diagrams and runbooks.

Conoscenze

IAM authentication architecture

Architectural leadership

Zero Trust

Conditional Access

Entra ID

SAML

OIDC

OAuth 2.0

FIDO2

Active Directory

Ping Identity

Formazione

Bachelor’s degree or higher

Strumenti

Microsoft Entra ID

Active Directory

Ping Identity

Descrizione del lavoro

3M is seeking a Principal Authentication Services Engineer to own enterprise authentication platform architecture across a global environment, influencing IAM standards and Zero Trust strategies. You will design, implement, and govern SSO, MFA, and CA across SaaS and on‑prem/integrated applications.

The role requires deep experience with Entra ID, AD, SAML/OIDC/OAuth, and FIDO2, with a track record of leading complex architectural initiatives. Hybrid work options apply in Maplewood or Austin.