Senior IAM Platform Engineer | Authentication & SSO Expert

3M; Maplewood (MN); Hybrid; USD 146,000 - 178,000; Full time

Job summary

3M is seeking a Senior Authentication Services Engineer to engineer, implement, and operate enterprise authentication across a global footprint. You will manage Entra ID, Active Directory, and MFA, while enabling secure SSO for SaaS and on-premise apps in a hybrid environment.

You will partner with IAM leadership to evolve authentication services, write runbooks, and support audits. This hands-on role requires strong scripting, policy work, and collaboration with security operations and

Qualifications

• Microsoft Entra ID: Strong hands-on experience including Conditional Access, PIM, application registrations, and hybrid identity (Entra Connect)
• Active Directory: Domain architecture, Group Policy, trusts, Kerberos, NTLM, and AD security hardening
• MFA: Enterprise MFA solutions including phishing-resistant methods (FIDO2, WHfB)
• Federation protocols: SAML 2.0, OIDC, and OAuth 2.0
• SSO: Integrations across enterprise SaaS and on-premises apps
• Automation: PowerShell scripting and Microsoft Graph API for identity operations
• Identity security tooling: Defender for Identity, Entra ID Protection, SIEM integrations
• Windows Hello for Business: WHfB deployment planning or FIDO2 rollouts
• PAM: CyberArk or similar tools in authentication workflows
• IGA: Lifecycle event integration with authentication systems
• Cloud Identity: AWS IAM, Azure AD B2B/B2C federation
• Certifications: SC-300, AZ-500 (preferred)
• Hybrid identity architectures in large enterprises

Responsibilities

• Authentication Platform Engineering: Engineer, configure, and maintain Entra ID, AD, and MFA across the enterprise
• Security & Compliance: Align authentication controls with Zero Trust and audit requirements
• Collaboration & Operational Excellence: Support incident response and cross-team IAM deliveries
• Documentation: Maintain runbooks, config records, and architecture diagrams

Skills

Microsoft Entra ID

Active Directory

MFA

SAML

OIDC

OAuth 2.0

SSO

PowerShell

Microsoft Graph API

Identity security tooling

Windows Hello for Business

CyberArk

PAM tools

IGA platforms

AWS IAM

Azure AD B2B/B2C

SC-300

AZ-500

Tools

Entra Connect

PIM

KMS/SAML/SSO tooling

Microsoft Graph API

Job description

3M is seeking a Senior Authentication Services Engineer to engineer, implement, and operate enterprise authentication across a global footprint. You will manage Entra ID, Active Directory, and MFA, while enabling secure SSO for SaaS and on-premise apps in a hybrid environment.

You will partner with IAM leadership to evolve authentication services, write runbooks, and support audits. This hands-on role requires strong scripting, policy work, and collaboration with security operations and