Principal IAM Engineer - Directory Services

About the role

Lead the engineering, administration, security, and modernization of Active Directory, Entra ID, Azure AD services, LDAP directories, and hybrid identity infrastructure for a global life sciences services organization.

Key responsibilities

• Design and implement directory security controls, including AD hardening, Group Policy management, CIS benchmark compliance, privileged access controls, and vulnerability remediation.
• Develop and maintain IAM automation, integrations, and operational tooling using PowerShell, Microsoft Graph, PowerBI, KQL, SQL, REST APIs, and Azure DevOps.
• Build reporting and auditing solutions for access reviews, compliance monitoring, account governance, and executive reporting.
• Participate in governance and lifecycle management of non‑human identities such as service accounts, application identities, certificates, and secrets.
• Troubleshoot complex AD, Entra ID, authentication/authorization, and identity governance issues using data‑driven analysis.
• Support audit, compliance, and regulatory requirements through evidence collection and access certifications.
• Create and maintain architecture diagrams, standards, runbooks, and technical documentation.
• Serve as senior technical leader and escalation point, mentoring junior engineers and promoting continuous improvement.

Required profile

• Bachelor’s degree in Computer Science, Cybersecurity, Engineering or related field.
• 8+ years of experience in IAM, Directory Services, Infrastructure, or Security Engineering.
• Strong hands‑on experience with Active Directory, Entra ID, Azure AD, hybrid identity architecture, and identity governance.
• Experience managing non‑human identities and implementing automation and reporting solutions.
• Proven ability to lead technical initiatives, mentor engineers, and communicate with both technical and business stakeholders.

Required skills

• Active Directory, Entra ID, Azure AD, LDAP
• PowerShell, Microsoft Graph, SQL, KQL, REST APIs, JSON
• PowerBI, Azure DevOps, Azure Automation, Logic Apps
• Identity governance platforms (e.g., Saviynt IGA, ServiceNow, Workday, Microsoft 365)
• Zero Trust, least privilege, privileged access management (PAM) concepts