Principal Identity Security Engineer - Natick, Ma

Job Description A leading technology organization is seeking a Principal Identity Security Engineer to join a team focused on securing and modernizing enterprise identity platforms across a complex hybrid environment.
In this role, you will help drive the strategy, engineering, and security of core identity services including Active Directory, Microsoft Entra ID, privileged access management, identity governance, and non-human identities. You'll collaborate across security, cloud, infrastructure, and application teams to build scalable identity solutions that support business growth while maintaining strong security controls.
This is an opportunity for a senior-level engineer who enjoys solving complex identity challenges, improving platform resilience, and driving automation across critical enterprise services. The ideal candidate combines deep technical expertise with a passion for security, operational excellence, and modern identity architectures. Required Skills & Experience

• 10+ years of experience in Identity and Access Management, Identity Security, Infrastructure Engineering, or related disciplines
• Strong expertise with Microsoft Active Directory and Microsoft Entra ID
• Experience designing and supporting hybrid identity environments
• Deep understanding of authentication, authorization, federation, provisioning, and access management technologies
• Experience securing privileged access environments and implementing identity security best practices
• Experience with service principals, managed identities, certificates, secrets, and application permissions
• Strong automation and scripting experience using modern engineering practices
• Experience working with APIs, Git-based workflows, and CI/CD pipelines
• Bachelor's degree or equivalent combination of education and experience

Desired Skills & Experience

• Identity Governance and Administration (IGA) experience
• Identity threat detection and response experience
• Disaster recovery and identity resiliency planning expertise
• Familiarity with NIST, ISO 27001, and related security frameworks
• Experience implementing least-privilege access models and application permission governance
• Cloud security and modern identity architecture experience
• Exposure to identity solutions supporting AI-enabled systems and automation platforms

What You Will Be Doing Daily Responsibilities: 80% Hands-On Engineering / 20% Technical Leadership

• Provide technical leadership for enterprise identity services and platforms
• Design and enhance authentication, authorization, privileged access, and identity governance capabilities
• Lead initiatives focused on identity security, platform hardening, and operational resilience
• Improve automation, standardization, and reliability across identity infrastructure
• Define scalable identity patterns and architectural guardrails for applications, cloud services, and automation platforms
• Partner with security, cloud, infrastructure, and application teams to strengthen enterprise-wide identity controls
• Support recovery planning, threat detection, and continuous improvement efforts across identity platforms
• Drive best practices for both human and non-human identity management

The Offer

• Competitive base salary
• Annual performance bonus
• Comprehensive benefits package
• High-visibility technical leadership opportunity
• Collaborative engineering culture
• Long-term career growth and advancement opportunities

You will receive the following benefits:

• Medical Insurance
• Dental Benefits
• Vision Benefits
• Paid Time Off (PTO)
• 401(k)

Applicants must be currently authorized to work in the US on a full-time basis now and in the future.