Principal Authentication Services Engineer

3M•Austin, TX

2d•$164,612 - $201,193•Hybrid

About The Position

The Principal Authentication Services Engineer is a senior technical leader and subject matter expert within 3M’s Identity & Access Management organization. The position owns the architecture, engineering, and lifecycle management of enterprise authentication platforms across a complex global environment, and helps shape the IAM authentication roadmap, organization-wide standards, and the evolution of authentication capabilities alongside the broader Zero Trust security strategy. The role engineers Microsoft Entra ID, Active Directory, and federated identity services; architects single sign-on integrations across SaaS, on-premises, and hybrid applications; and manages multifactor authentication policies and phishing-resistant credentials. It also leads Conditional Access development and governance, maintains technical documentation, evaluates emerging technologies, supports security and compliance activities, and serves as an escalation point for complex authentication challenges. The engineer mentors colleagues and works with application, infrastructure, and security operations teams as an IAM authority. The position is hybrid in Maplewood, Minnesota, or Austin, Texas, with at least three days per week onsite. Travel may be required up to 10%. Relocation assistance may be authorized. Applicants must be legally authorized to work in the country of employment without employment-visa sponsorship.

Requirements

Bachelor’s degree or higher, completed and verified before starting.
At least eight years of experience designing, deploying, and managing enterprise IAM authentication solutions, such as Entra ID, Ping Identity, or Active Directory, in a private, public, government, or military environment.
At least five years of experience working with modern authentication protocols, including SAML, OAuth 2.0, OpenID Connect (OIDC), and FIDO2, in a private, public, government, or military environment.
At least five years of experience leading complex architectural initiatives, Conditional Access hardening, or Zero Trust security programs in a private, public, government, or military environment.
Must be legally authorized to work in the country of employment without sponsorship for employment visa status.

Responsibilities

Own the engineering design, implementation, and operational health of Microsoft Entra ID, Active Directory, and federated identity services across the enterprise.
Architect and maintain SSO integrations using SAML, OIDC, and OAuth 2.0 across SaaS, on-premises, and hybrid application portfolios.
Engineer and manage MFA policies and authentication method configurations, and promote phishing-resistant credentials such as FIDO2, Windows Hello for Business, and certificate-based authentication.
Lead Conditional Access policy development, testing, and lifecycle governance.
Define and maintain authentication standards, patterns, and reference architectures for new and existing applications.
Evaluate emerging authentication technologies and lead proof-of-concept efforts that inform roadmap decisions.
Maintain technical documentation, including architecture diagrams, decision records, and runbooks.
Partner with Security Architecture to align authentication controls with Zero Trust principles and enterprise security policy.
Support audit and compliance activities by providing technical evidence, control narratives, and remediation guidance.
Identify authentication posture gaps and lead engineering remediation efforts.
Serve as the escalation point for complex authentication incidents and engineering challenges.
Mentor and develop mid-level engineers on the Authentication Services team.
Engage with application teams, infrastructure engineering, and security operations as a trusted IAM authority.
Comply with corporate policies, procedures, and security standards while performing assigned duties.
Contribute to a strong Environmental Health and Safety culture by following safety policies, identifying hazards, and engaging in continuous improvement.