Senior Information Security Manager - Active Directory / Entra ID

Boston Scientific•Marlborough, MA

1d•Hybrid

About The Position

The Senior Manager, Identity & Access Management (IAM), leads the engineering teams responsible for Active Directory (AD), Microsoft Entra ID and hybrid identity services across Boston Scientific's global technology environment. The role provides strategic and operational leadership for the security, reliability, resilience, performance and modernization of critical enterprise identity platforms. The Senior Manager directly leads highly technical individual contributors, including senior and principal-level engineers, while driving engineering excellence, operational maturity and continuous improvement. The role collaborates with Infrastructure, Cloud, Cybersecurity and other cross-functional teams to advance secure identity capabilities, strengthen enterprise resilience and support evolving business and technology needs. This position follows a hybrid work model requiring employees to work from a local office at least three days per week. The locations are Arden Hills, Minnesota, or Marlborough, Massachusetts. Sponsorship and relocation assistance are not available.

Requirements

Bachelor's degree in computer science, information technology, cybersecurity, engineering or a related discipline, or equivalent practical experience.
At least 8 years of experience in identity and access management, Active Directory, Microsoft Entra ID, cybersecurity or identity engineering.
Demonstrated experience leading, coaching and developing highly technical engineering teams, including senior-level individual contributors.
Strong knowledge of Active Directory architecture and operations, including domain controllers, replication, authentication, Group Policy, DNS dependencies, monitoring, backup and recovery.
Strong knowledge of Microsoft Entra ID, modern authentication, Conditional Access, privileged identity management and hybrid identity architectures.
Experience leading enterprise security remediation, platform resilience, disaster recovery or technology modernization initiatives.
Strong understanding of Zero Trust architecture, least-privilege principles, privileged identity management and enterprise identity security practices.
Demonstrated ability to establish engineering priorities, manage operational risks and drive accountability for critical technology services.
Strong leadership, stakeholder management, strategic planning, problem-solving and executive communication skills.

Nice To Haves

Experience working in a large, global or highly regulated enterprise environment.
Experience supporting identity infrastructure and services across enterprise IT, manufacturing and operational technology environments.
Experience in the medical device, health care, life sciences, pharmaceutical or complex manufacturing industries.
Familiarity with adjacent identity and cybersecurity technologies, including CyberArk, Saviynt, CrowdStrike Falcon Identity, public key infrastructure (PKI) and secrets management.
Relevant Microsoft identity or security certifications, CISSP, CISM, CCSP or comparable professional certifications.

Responsibilities

Lead, coach and develop engineering teams responsible for Active Directory, Microsoft Entra ID and hybrid identity services, including senior and principal-level technical individual contributors.
Define and execute identity platform strategies, technology roadmaps, engineering priorities and modernization initiatives aligned with enterprise security and business objectives.
Oversee Active Directory engineering and operations, including domain controller deployment, promotion, configuration, monitoring, maintenance and decommissioning.
Ensure continuous monitoring and operational health of domain controllers, replication, authentication, directory synchronization, DNS dependencies and other critical identity services.
Establish and maintain backup, recovery and resilience capabilities, including regular validation and testing of Active Directory recovery readiness.
Drive Active Directory security hardening, lifecycle management, vulnerability remediation, technical debt reduction and mitigation of operational risks.
Partner with Infrastructure teams on Windows Server patching, operating system upgrades, vulnerability remediation and configuration changes affecting domain controllers.
Ensure engineering teams test and validate operating system-level changes before production deployment and verify Active Directory health and functionality afterward.
Lead Microsoft Entra ID engineering, operations and modernization, including Conditional Access, multifactor authentication, passwordless authentication, Identity Protection, Privileged Identity Management, enterprise applications and hybrid identity integration.
Advance Zero Trust architecture, least-privilege access, automation, standardization and secure identity engineering practices across enterprise platforms.
Define, monitor and report service health and operational performance metrics, including availability, replication, backup and recovery readiness, vulnerabilities, lifecycle risks and technical debt.
Lead incident response, technical investigations, root-cause analysis and corrective actions for significant identity service incidents and platform issues.
Foster engineering excellence, accountability, collaboration, continuous improvement and proactive risk management.
Collaborate with Infrastructure, Cloud, Security Operations, Enterprise Architecture, Microsoft 365, Manufacturing and Operational Technology, and adjacent IAM teams to deliver secure, reliable and scalable identity services.