Principal IAM Engineer / Onsite in Natick, MA

A leading mathematical computing software organization is hiring a Principal IAM / Active Directory Engineer to join its Identity and Access Management team. This is a full-time opportunity based in Natick, Massachusetts, with a hybrid schedule requiring 3 days onsite per week. The organization is strengthening its on-premises and cloud security posture and needs a senior, hands-on engineer with deep expertise in Active Directory, Microsoft Entra ID, hybrid identity, identity security, and IAM automation.

This is a high-impact engineering role for someone who wants to own and evolve enterprise identity platforms rather than simply administer them. The Principal Engineer will provide technical leadership across core identity services, designing secure and resilient identity patterns while improving automation, governance, reliability, and recoverability. The position offers significant exposure to application identity, privileged access, non-human identities, APIs, CI/CD, and emerging identity requirements for AI-enabled systems.

Required Skills & Experience

• 10+ years of professional technology experience or equivalent experience, with a bachelor's degree
• Deep hands-on experience with Microsoft Active Directory
• Strong hands-on experience with Microsoft Entra ID
• Enterprise experience with hybrid identity, authentication, federation, and provisioning
• Strong knowledge of IAM architecture and enterprise identity platform engineering
• Experience securing and hardening Active Directory and cloud identity environments
• Experience with privileged access, administrative tiering, and least-privilege security models
• IAM automation experience using scripting and APIs
• Experience implementing engineering practices through Git-based workflows and CI/CD
• Understanding of identity resilience, operational readiness, disaster recovery, and recovery planning
• Ability to provide technical leadership while remaining highly hands-on

Desired Skills & Experience

• Experience managing non-human and workload identities, including service principals, managed identities, certificates, secrets, and federated credentials
• Experience with application registrations, delegated permissions, application permissions, and consent models
• Identity Threat Detection and Response experience
• Configuration-as-code and automated identity platform management experience
• Knowledge of security and regulatory frameworks such as NIST and ISO 27001
• Experience establishing identity engineering standards and guardrails across enterprise environments
• Familiarity with identity patterns for AI-enabled systems, automation platforms, and agentic workflows
• Strong cross-functional communication skills and experience partnering with security, cloud, infrastructure, IT, and application engineering teams

What You Will Be Doing

Tech Breakdown

• 35% Active Directory and hybrid identity engineering
• 30% Microsoft Entra ID and cloud identity
• 20% IAM security, privileged access, and identity governance
• 15% Automation, APIs, Git workflows, and CI/CD

Daily Responsibilities

• 40% Hands-on identity platform engineering, automation, and implementation
• 25% Architecture and technical leadership for enterprise identity services
• 20% Security hardening, resilience, threat detection, and recovery planning
• 15% Cross-functional collaboration, governance, and engineering standards

The Offer

• Full-time employment
• Hybrid schedule with 3 days onsite per week in Natick, MA
• Opportunity to provide technical leadership over critical enterprise identity platforms and security initiatives
• Exposure to modern identity challenges spanning cloud, on-premises infrastructure, application identities, automation, and AI-enabled systems