Sr. Identity Security Engineer Active Directory & Entra ID

MathWorks; Natick (MA); On-site; USD 122,000 - 190,000; Full time

Job summary

MathWorks in Natick, MA is seeking a Sr. Identity Security Engineer to advance Active Directory and Microsoft Entra ID across hybrid environments. You will build secure, scalable identity services and automate repeatable processes for reliability.

Collaborate with security, cloud, IT, and application teams to strengthen access controls, governance, and non-human identities, while driving best practices and incident response readiness.

Qualifications

• Bachelor's degree with 6+ years of experience, or master's with 3+ years, or equivalent.
• Expertise with Active Directory and enterprise IAM practices.
• Experience with Microsoft Entra ID and hybrid identity environments.

Responsibilities

• Engineer and optimize core identity platforms including Active Directory and Entra ID.
• Implement authentication, authorization, privileged access, and identity governance controls.
• Improve security, resilience, and recoverability of identity services.
• Develop automation, scripts, and repeatable engineering processes for reliability.
• Collaborate with teams to design identity patterns and guardrails for AI-enabled systems.
• Provide technical guidance, participate in design reviews, and resolve complex issues.
• Support operations, incident response, root-cause analysis, and continuous improvement.

Skills

Active Directory

Identity security practices

Hybrid identity concepts

Non-human identities

Automation & scripting

Education

Bachelor's degree

Master's degree

Tools

PowerShell

Job description

Sr. Identity Security Engineer Active Directory & Entra ID

• Team: Information Technology
• Location: US-MA-Natick
• Salary Range: USD 122,300 - 189,600

Job Summary

Do you enjoy solving complex identity challenges and building secure, reliable identity services that enable the business?

Join our Identity and Access Management team, where you will engineer and support enterprise identity capabilities across Active Directory, Microsoft Entra ID, hybrid identity, privileged access, and non-human identities. You will collaborate with security, cloud, IT, and application teams to improve identity platforms, strengthen access controls, and implement secure patterns for applications, services, and emerging AI-enabled systems.

In this role, you will apply strong hands-on engineering skills to enhance the security, reliability, and governance of core identity services while using automation and repeatable practices to make those services more consistent, scalable, and resilient.

Responsibilities

• Engineer, configure, and improve core identity platforms and capabilities, including Active Directory, Microsoft Entra ID, hybrid identity, and non-human identities.
• Implement and support authentication, authorization, privileged access, and identity governance controls across human and non-human identities.
• Contribute to the security, resilience, and recoverability of enterprise identity services through platform hardening, monitoring, operational readiness, troubleshooting, and recovery exercises.
• Build and maintain automation, scripts, documentation, and repeatable engineering processes that improve consistency, reliability, and operational efficiency.
• Partner with senior engineers and cross-functional teams to implement identity patterns and guardrails for applications, services, AI-enabled systems, and automation platforms.
• Provide technical guidance to project teams, participate in design reviews, and help resolve complex identity platform issues.
• Participate in operational support, incident response, root-cause analysis, and continuous improvement for identity services.

Minimum Qualifications

• A bachelor's degree and 6 years of professional work experience (or a master's degree and 3 years of professional work experience, or a PhD degree, or equivalent experience) is required.
• Expertise with active directory

Additional Qualifications

A successful candidate will have experience in many of the following areas:

• Enterprise identity platforms, including Active Directory, Microsoft Entra ID, hybrid identity, federation, provisioning, and authentication technologies.
• Identity security practices, including privileged access, administrative tiering, identity threat detection and response, recovery planning, and platform hardening.
• Workload and non-human identities, including service principals, managed identities, certificates, secrets, application permissions, and federated credentials.
• IAM engineering and automation, including PowerShell or other scripting languages, APIs, configuration-as-code, Git-based workflows, and CI/CD practices.
• Application identity and permission governance, including app registrations, delegated and application permissions, consent models, and least-privilege access design.
• Troubleshooting complex identity, authentication, synchronization, and authorization issues across hybrid environments.
• Working knowledge of security and regulatory frameworks such as NIST, ISO 27001, and similar standards.
• Interest in emerging identity patterns supporting AI-enabled systems, automation platforms, and agentic workflows.