Principal Engineer, Identity & Access Management (IAM)

Boston Scientific•Marlborough, MA

1d•Hybrid

About The Position

Boston Scientific is seeking a Principal Engineer specializing in Microsoft Active Directory to provide enterprise-level technical leadership for the architecture, security, resilience, and modernization of global directory services. As a principal-level individual contributor, this role establishes the technical vision, architectural standards, and strategic direction for directory services supporting corporate IT, manufacturing operations, and business-critical systems worldwide. The position influences enterprise technology decisions, leads complex engineering initiatives, and partners across cybersecurity, infrastructure, IAM, and cloud organizations to deliver secure, scalable, and resilient identity solutions. It contributes to strengthening identity security, advancing hybrid identity capabilities, and ensuring the long-term reliability and modernization of foundational identity infrastructure. The role may be based in Arden Hills, Minnesota, or Marlborough, Massachusetts, and follows a hybrid model requiring employees to work in a local office at least three days per week. Boston Scientific will not provide or assume employment visa sponsorship, and relocation assistance is not available. The anticipated salary range is $102,100 to $194,000; actual compensation varies by location and other relevant factors. Compensation for exempt, non-sales roles may include an annual bonus target and long-term incentives, subject to plan eligibility and other requirements.

Requirements

Bachelor's degree in computer science, information technology, engineering, or a related field.
At least 7 years of experience in IT infrastructure, identity and access management, directory services engineering, or a related technical discipline.
Extensive experience designing, engineering, securing, and supporting large-scale enterprise Microsoft Active Directory environments.
Advanced expertise in Active Directory Domain Services, forest and domain architecture, DNS, Group Policy, LDAP, Kerberos, replication, and trust relationships.
Demonstrated experience defining enterprise architecture, establishing engineering standards, and leading complex technical initiatives across global environments.
Deep knowledge of identity security architecture, privileged access protection, Tier 0 security controls, and Zero Trust principles.
Proven experience architecting directory resilience, backup and recovery solutions, disaster recovery strategies, and business continuity capabilities.
Ability to evaluate complex technical challenges, make strategic architectural decisions, and influence technology direction across multiple IT and cybersecurity functions.
Strong communication, stakeholder engagement, and technical leadership skills, including the ability to influence decisions without direct reporting authority.

Nice To Haves

Experience designing and implementing Microsoft Entra ID integrations and hybrid identity architectures.
Experience with privileged access management and identity governance platforms such as CyberArk, Saviynt, or equivalent technologies.
Advanced PowerShell scripting and automation experience supporting enterprise identity infrastructure.
Experience developing technical roadmaps, architectural standards, and enterprise modernization strategies.
Experience in highly regulated environments, including medical device manufacturing, healthcare, or critical infrastructure.
Experience mentoring engineers and providing technical leadership across globally distributed teams.

Responsibilities

Define and drive enterprise architecture, technical strategy, and the engineering roadmap for Microsoft Active Directory services across a complex global environment.
Serve as the principal technical authority for Active Directory Domain Services, including forest and domain architecture, trusts, replication, Group Policy, DNS, LDAP, and Kerberos.
Establish and govern enterprise engineering standards, architectural principles, security controls, and operational best practices for directory services.
Lead Active Directory security initiatives, including Tier 0 protection, privileged access security, identity threat mitigation, and alignment with Zero Trust architecture.
Architect and advance directory resilience, backup and recovery capabilities, disaster recovery strategies, and service continuity frameworks.
Provide technical leadership for infrastructure modernization initiatives, including domain controller lifecycle management, operating system upgrades, and platform transformation.
Partner with cybersecurity, infrastructure, cloud, and IAM leadership to define and implement secure hybrid identity architectures integrating Microsoft Entra ID.
Evaluate emerging identity technologies, architectural risks, and industry trends, and recommend strategic improvements and long-term platform investments.
Lead resolution of complex, enterprise-wide directory service challenges, providing architectural guidance and driving sustainable solutions.
Champion automation, engineering efficiency, proactive monitoring, and continuous improvement to strengthen service reliability, scalability, and security.
Influence cross-functional technical decisions, align stakeholders, and communicate architectural recommendations, risks, and trade-offs to technical and business leadership.
Mentor engineers, provide technical guidance, and promote engineering excellence through knowledge sharing, design reviews, and architectural governance.