Principal Authentication Services Engineer

3M•Austin, TX

1d•Hybrid

About The Position

The Principal Authentication Services Engineer is a senior technical leader and subject matter expert within 3M’s Identity & Access Management organization. The role owns the architecture, engineering, and lifecycle management of enterprise authentication platforms across a complex global environment. It also helps shape the IAM authentication roadmap, organization-wide standards, and the evolution of authentication capabilities alongside the broader Zero Trust security strategy. The position is based in Maplewood, Minnesota, or Austin, Texas, in a hybrid arrangement requiring at least three days onsite per week. Travel may include up to 10%, and relocation assistance may be authorized. Applicants must be legally authorized to work in the country of employment without sponsorship for employment visa status. For U.S. applicants, the expected compensation range is $164,612–$201,193, including base pay plus variable incentive pay if eligible. Compensation may vary based on relevant knowledge, training, skills, work location, and experience. The position may be eligible for benefits including medical, dental and vision coverage, health savings accounts, health care and dependent care flexible spending accounts, disability benefits, life insurance, voluntary benefits, paid absences, and retirement benefits. U.S.-based full-time employees must sign an employee agreement concerning confidential information, trade secrets, conflicts of interest, and assignment of inventions; employees at Job Grade 7 or equivalent and above may also have post-employment non-compete or non-solicitation obligations. Employees are expected to comply with corporate policies, procedures, and security standards, and to contribute to a strong Environmental Health and Safety culture by following safety policies, identifying hazards, and engaging in continuous improvement.

Requirements

Bachelor’s degree or higher, completed and verified prior to start.
Eight years of experience designing, deploying, and managing enterprise IAM authentication solutions, such as Entra ID, Ping Identity, or Active Directory, in a private, public, government, or military environment.
Five years of experience working with modern authentication protocols, including SAML, OAuth 2.0, OpenID Connect (OIDC), and FIDO2, in a private, public, government, or military environment.
Five years of experience leading complex architectural initiatives, Conditional Access hardening, or Zero Trust security programs in a private, public, government, or military environment.
Must be legally authorized to work in the country of employment without sponsorship for employment visa status.

Responsibilities

Own the engineering design, implementation, and operational health of Microsoft Entra ID, Active Directory, and federated identity services across the enterprise.
Architect and maintain SSO integrations using SAML, OIDC, and OAuth 2.0 across SaaS, on-premises, and hybrid application portfolios.
Engineer and manage MFA policies, authentication method configurations, and adoption of phishing-resistant credentials, including FIDO2, Windows Hello for Business, and certificate-based authentication.
Lead Conditional Access policy development, testing, and lifecycle governance.
Define authentication standards, patterns, and reference architectures for new and existing applications, and keep them current.
Evaluate emerging authentication technologies and drive proof-of-concept efforts to inform roadmap decisions.
Maintain technical documentation, including architecture diagrams, decision records, and runbooks.
Partner with Security Architecture to align authentication controls with Zero Trust principles and enterprise security policy.
Support audit and compliance activities by providing technical evidence, control narratives, and remediation guidance.
Identify gaps in authentication posture and lead engineering remediation efforts.
Serve as an escalation point for complex authentication incidents and engineering challenges.
Mentor and develop mid-level engineers on the Authentication Services team.
Engage with application teams, infrastructure engineering, and security operations as a trusted IAM authority.
Comply with corporate policies, procedures, and security standards while performing assigned duties.
Contribute to a strong EHS culture by following safety policies, identifying hazards, and engaging in continuous improvement.