Principal Engineer, Identity & Access Management (IAM)
About The Position
Boston Scientific is seeking a Principal Engineer specializing in Microsoft Active Directory to provide enterprise-level technical leadership in the architecture, security, resilience, and modernization of global directory services. This principal-level individual contributor will establish technical vision, architectural standards, and strategic direction for Microsoft Active Directory services supporting corporate IT, manufacturing operations, and business-critical systems worldwide. The role serves as a trusted technical authority, influencing enterprise technology decisions, leading complex engineering initiatives, and partnering across cybersecurity, infrastructure, IAM, and cloud organizations to deliver secure, scalable, and resilient identity solutions. The engineer will help strengthen enterprise identity security, advance hybrid identity capabilities, and ensure the long-term reliability and modernization of foundational identity infrastructure. The position may be based in Arden Hills, Minnesota, or Marlborough, Massachusetts. It follows a hybrid work model requiring at least three days per week in a local office. Boston Scientific will not offer or assume sponsorship of an employment visa, and relocation assistance is not available for this position.
Requirements
- Bachelor's degree in computer science, information technology, engineering, or a related field.
- At least 7 years of experience in IT infrastructure, identity and access management, directory services engineering, or a related technical discipline.
- Extensive experience designing, engineering, securing, and supporting large-scale enterprise Microsoft Active Directory environments.
- Advanced expertise in Active Directory Domain Services, forest and domain architecture, DNS, Group Policy, LDAP, Kerberos, replication, and trust relationships.
- Demonstrated experience defining enterprise architecture, establishing engineering standards, and leading complex technical initiatives across global environments.
- Deep knowledge of identity security architecture, privileged access protection, Tier 0 security controls, and Zero Trust principles.
- Proven experience architecting directory resilience, backup and recovery solutions, disaster recovery strategies, and business continuity capabilities.
- Demonstrated ability to evaluate complex technical challenges, make strategic architectural decisions, and influence technology direction across multiple IT and cybersecurity functions.
- Strong communication, stakeholder engagement, and technical leadership skills, including the ability to influence decisions without direct reporting authority.
Nice To Haves
- Experience designing and implementing Microsoft Entra ID integrations and hybrid identity architectures.
- Experience with privileged access management and identity governance platforms such as CyberArk, Saviynt, or equivalent technologies.
- Advanced PowerShell scripting and automation experience supporting enterprise identity infrastructure.
- Experience developing technical roadmaps, architectural standards, and enterprise modernization strategies.
- Experience working in highly regulated environments, including medical device manufacturing, healthcare, or critical infrastructure.
- Experience mentoring engineers and providing technical leadership across globally distributed teams.
Responsibilities
- Define and drive the enterprise architecture, technical strategy, and engineering roadmap for Microsoft Active Directory services across a complex global environment.
- Serve as the principal technical authority for Active Directory Domain Services, including forest and domain architecture, trusts, replication, Group Policy, DNS, LDAP, and Kerberos.
- Establish and govern enterprise engineering standards, architectural principles, security controls, and operational best practices for directory services.
- Lead strategic Active Directory security initiatives, including Tier 0 protection, privileged access security, identity threat mitigation, and alignment with Zero Trust architecture.
- Architect and advance enterprise directory resilience, backup and recovery capabilities, disaster recovery strategies, and service continuity frameworks.
- Provide technical leadership for complex infrastructure modernization initiatives, including domain controller lifecycle management, operating system upgrades, and platform transformation.
- Partner with cybersecurity, infrastructure, cloud, and IAM leadership to define and implement secure hybrid identity architectures integrating Microsoft Entra ID.
- Evaluate emerging identity technologies, architectural risks, and industry trends to recommend strategic improvements and long-term platform investments.
- Lead technical resolution of complex, enterprise-wide directory service challenges, providing architectural guidance and driving sustainable solutions.
- Champion automation, engineering efficiency, proactive monitoring, and continuous improvement to strengthen service reliability, scalability, and security.
- Influence cross-functional technical decisions, align stakeholders, and communicate architectural recommendations, risks, and trade-offs to technical and business leadership.
- Mentor engineers, provide technical guidance, and promote engineering excellence through knowledge sharing, design reviews, and architectural governance.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Principal
