Your browser does not support javascript! Please enable it, otherwise web will not work for you.

Principal Engineer

Home > Other programming jobs

Principal Engineer in USA new

  • Boston Scientific
  • Full time
  • Email
  • Arden Hills, MN

Responsibilities

  • Define and drive enterprise architecture, technical strategy, and engineering roadmaps for Microsoft Entra ID and cloud identity services.
  • Provide principal-level technical authority for authentication, authorization, federation, and cloud identity architecture.
  • Design identity security controls including Conditional Access, multifactor authentication, passwordless authentication, Identity Protection, Privileged Identity Management, and Zero Trust principles.
  • Establish secure privileged identity, least-privilege, identity-tiering, hybrid identity, and administrative access models.
  • Define secure SSO, SAML, OAuth 2.0, OpenID Connect, application registration, API permission, service principal, managed identity, and workload identity standards.
  • Design identity solutions for corporate IT, cloud platforms, manufacturing, operational technology, Digital Health, customer-facing applications, and partner ecosystems.
  • Define secure integrations across Microsoft Entra ID, Saviynt, CyberArk, Active Directory, and the broader IAM ecosystem.
  • Drive identity infrastructure automation and modernization using Microsoft Graph, PowerShell, REST APIs, Terraform, and infrastructure as code.
  • Establish identity logging, monitoring, auditing, telemetry, and SIEM integration requirements.
  • Lead technical design reviews, root-cause investigations, resilience and recovery initiatives, and strategic platform modernization.
  • Serve as a senior escalation point for complex identity, authentication, federation, authorization, and cloud security challenges.
  • Establish engineering standards, documentation, operating procedures, configuration baselines, runbooks, and troubleshooting practices.
  • Identify platform risks, technical debt, automation opportunities, and operational improvements.
  • Influence cross-functional architecture decisions and mentor IAM engineers through technical guidance and coaching.

Requirements

  • Bachelor’s degree in computer science, information technology, engineering, cybersecurity, or a related field.
  • At least 7 years of experience in identity and access management, cloud identity engineering, cybersecurity architecture, or a related technical discipline.
  • Hands-on experience designing, engineering, and securing Microsoft Entra ID environments in complex, large-scale enterprises.
  • Advanced expertise in Microsoft Entra ID, Conditional Access, multifactor authentication, passwordless authentication, enterprise applications, Privileged Identity Management, and cloud identity architecture.
  • Strong knowledge of SAML, OAuth 2.0, OpenID Connect, Microsoft Graph, Azure RBAC, service principals, managed identities, and workload identities.
  • Experience designing secure enterprise application integrations, external identity solutions, cross-tenant access, and cloud identity services.
  • Experience automating identity infrastructure and engineering processes with PowerShell, Microsoft Graph APIs, REST APIs, Terraform, or comparable technologies.
  • Deep understanding of Zero Trust, least privilege, privileged identity security, identity tiering, and modern authentication security principles.
  • Experience establishing identity logging, monitoring, auditing, and operational security controls.
  • Ability to define technical architecture, establish engineering standards, lead complex cross-functional initiatives, influence decisions, solve advanced technical problems, and mentor engineers without direct reporting authority.
  • Preferred experience with on-premises Active Directory, hybrid AD/Entra architectures, directory security, Tier 0 protection, and directory hardening.
  • Preferred experience delivering IAM or cybersecurity solutions in medical device, healthcare, pharmaceutical, manufacturing, regulated, or operational technology environments.
  • Preferred experience with CyberArk, Saviynt, Splunk, Microsoft Entra External ID, B2B collaboration, Entitlement Management, Identity Protection, workload identities, and cross-tenant access.
  • Familiarity with Yubico, DigiCert, 1Password, Ping Identity, CrowdStrike Falcon Identity, NIST Cybersecurity Framework, NIST SP 800-82, IEC 62443, Zero Trust principles, and relevant Microsoft, cloud architecture, or cybersecurity certifications.

Benefits

  • Hybrid work model requiring at least three days per week in the local Arden Hills, Minnesota, or Marlborough, Massachusetts office.
  • Relocation assistance is not available for this position.
  • The posting references core and optional employee benefits, with eligibility and offerings varying by location and other factors.

Salary: $102k - $194k/yr

Boston Scientific

Boston Scientific designs and manufactures implantable and minimally invasive medical devices used by physicians to diagnose and treat cardiovascular, endoscopic, urological, neurological, and other conditions. It sells these products and related therapies to hospitals and health systems worldwid...

Similar positions

Sr Software Engineer - Engineer

  • Uber
  • Full time
  • Others
  • 11/04/2026
  • Bengaluru, India

Senior Software Engineer, Big Data

  • ZipRecruiter
  • Full time
  • USA
  • 11/04/2026
  • Salary: $190k - $250k/yr
  • Remote

Senior ML Engineer

  • Xebia
  • Full time
  • Remote
  • 11/04/2026
  • Bulgaria, Poland

Senior DevOps Engineer

  • Incode Technologies
  • Full time
  • Remote
  • 11/04/2026
  • Serbia

Software Engineer (Portugal)

  • HiddenLayer
  • Full time
  • Others
  • 11/04/2026
  • Lisbon, Portugal