Principal Engineer, Identity & Access Management (IAM)

Additional Location(s): US-MN-Arden Hills; US-MA-Marlborough

Diversity - Innovation - Caring - Global Collaboration - Winning Spirit - High Performance

At Boston Scientific, we’ll give you the opportunity to harness all that’s within you by working in teams of diverse and high-performing employees, tackling some of the most important health industry challenges. With access to the latest tools, information and training, we’ll help you in advancing your skills and career. Here, you’ll be supported in progressing – whatever your ambitions.       

About the role:

Boston Scientific was recognized by Forbes as one of the Best Workplaces for Engineers in 2026, reflecting a culture where engineers do meaningful work.

Boston Scientific was recognized as a Glassdoor Best Place to Work in 2026, ranking No. 15 on the Top 100 list, reflecting the culture our employees experience every day.

Boston Scientific is seeking a Principal Engineer, Identity & Access Management (IAM), specializing in Microsoft Active Directory to provide enterprise-level technical leadership in the architecture, security, resilience and modernization of our global directory services.

As a Principal-level individual contributor, you will establish the technical vision, architectural standards and strategic direction for Microsoft Active Directory services supporting corporate IT, manufacturing operations and business-critical systems worldwide. This role serves as a trusted technical authority, influencing enterprise technology decisions, leading complex engineering initiatives and partnering across cybersecurity, infrastructure, IAM and cloud organizations to deliver secure, scalable and resilient identity solutions.The incumbent will play a critical role in strengthening enterprise identity security, advancing hybrid identity capabilities and ensuring the long-term reliability and modernization of foundational identity infrastructure.

Work model, sponsorship, relocation:

This position may be based in Arden Hills, Minnesota, or Marlborough, Massachusetts.

At Boston Scientific, we value collaboration and synergy. This role follows a hybrid work model requiring employees to be in our local office at least three days per week. Boston Scientific will not offer sponsorship or take over sponsorship of an employment visa for this position at this time. Relocation assistance is not available for this position at this time.

Your responsibilities will include:

• Define and drive the enterprise architecture, technical strategy and engineering roadmap for Microsoft Active Directory services across a complex global environment.

• Serve as the principal technical authority for Active Directory Domain Services, including forest and domain architecture, trusts, replication, Group Policy, DNS, LDAP and Kerberos.

• Establish and govern enterprise engineering standards, architectural principles, security controls and operational best practices for directory services.

• Lead strategic Active Directory security initiatives, including Tier 0 protection, privileged access security, identity threat mitigation and Zero Trust architecture alignment.

• Architect and advance enterprise directory resilience, backup and recovery capabilities, disaster recovery strategies and service continuity frameworks.

• Provide technical leadership for complex, high-impact infrastructure modernization initiatives, including domain controller lifecycle management, operating system upgrades and platform transformation.

• Partner with cybersecurity, infrastructure, cloud and IAM leadership to define and implement secure hybrid identity architectures integrating Microsoft Entra ID.

• Evaluate emerging identity technologies, architectural risks and industry trends to recommend strategic improvements and long-term platform investments.

• Lead the technical resolution of complex, enterprise-wide directory service challenges, providing architectural guidance and driving sustainable solutions.

• Champion automation, engineering efficiency, proactive monitoring and continuous improvement to strengthen service reliability, scalability and security.

• Influence cross-functional technical decisions, establish alignment among stakeholders and communicate architectural recommendations, risks and trade-offs to technical and business leadership.

• Mentor engineers, provide technical guidance and promote engineering excellence through knowledge sharing, design reviews and architectural governance.

Required qualifications:

• Minimum Bachelor's degree in computer science, information technology, engineering or a related field.

• Minimum of 7 years' experience in IT infrastructure, identity and access management, directory services engineering or a related technical discipline.

• Extensive experience designing, engineering, securing and supporting large-scale, enterprise Microsoft Active Directory environments.

• Advanced expertise in Active Directory Domain Services, forest and domain architecture, DNS, Group Policy, LDAP, Kerberos, replication and trust relationships.

• Demonstrated experience defining enterprise architecture, establishing engineering standards and leading complex technical initiatives across global environments.

• Deep knowledge of identity security architecture, privileged access protection, Tier 0 security controls and Zero Trust principles.

• Proven experience architecting directory resilience, backup and recovery solutions, disaster recovery strategies and business continuity capabilities.

• Demonstrated ability to evaluate complex technical challenges, make strategic architectural decisions and influence technology direction across multiple IT and cybersecurity functions.

• Strong communication, stakeholder engagement and technical leadership skills, with the ability to influence decisions without direct reporting authority.

Preferred qualifications:

• Experience designing and implementing Microsoft Entra ID integrations and hybrid identity architectures.

• Experience with privileged access management and identity governance platforms such as CyberArk, Saviynt or equivalent technologies.

• Advanced PowerShell scripting and automation experience supporting enterprise identity infrastructure.

• Experience developing technical roadmaps, architectural standards and enterprise modernization strategies.

• Experience working in highly regulated environments, including medical device manufacturing, healthcare or critical infrastructure.

• Experience mentoring engineers and providing technical leadership across globally distributed teams.

Requisition ID: 636827

Minimum Salary: $102100 

Maximum Salary: $194000 

The anticipated compensation listed above and the value of core and optional employee benefits offered by Boston Scientific (BSC) – see www.bscbenefitsconnect.com—will vary based on actual location of the position and other pertinent factors considered in determining actual compensation for the role. Compensation will be commensurate with demonstrable level of experience and training, pertinent education including licensure and certifications, among other relevant business or organizational needs. At BSC, it is not typical for an individual to be hired near the bottom or top of the anticipated salary range listed above.

Compensation for non-exempt (hourly), non-sales roles may also include variable compensation from time to time (e.g., any overtime and shift differential) and annual bonus target (subject to plan eligibility and other requirements).

Compensation for exempt, non-sales roles may also include variable compensation, i.e., annual bonus target and long-term incentives (subject to plan eligibility and other requirements).

For MA positions: It is unlawful to require or administer a lie detector test for employment. Violators are subject to criminal penalties and civil liability.

Boston Scientific transforms lives through innovative medical technologies that improve the health of patients around the world. As a global medical technology leader for more than 45 years, we advance science for life by providing a broad range of high-performance solutions that address unmet patient needs and reduce the cost of healthcare. Our portfolio of devices and therapies helps physicians diagnose and treat complex cardiovascular, respiratory, digestive, oncological, neurological and urological diseases and conditions. Learn more at www.bostonscientific.com and follow us on LinkedIn.

Boston Scientific Corporation has been and will continue to be an equal opportunity employer. To ensure full implementation of its equal employment policy, the Company will continue to take steps to assure that recruitment, hiring, assignment, promotion, compensation, and all other personnel decisions are made and administered without regard to race, religion, color, national origin, citizenship, sex, sexual orientation, gender identity, gender expression, veteran status, age, mental or physical disability, genetic information or any other protected class.

Please be advised that certain US based positions, including without limitation field sales and service positions that call on hospitals and/or health care centers, require acceptable proof of COVID-19 vaccination status.  Candidates will be notified during the interview and selection process if the role(s) for which they have applied require proof of vaccination as a condition of employment.  Boston Scientific continues to evaluate its policies and protocols regarding the COVID-19 vaccine and will comply with all applicable state and federal law and healthcare credentialing requirements.   As employees of the Company, you will be expected to meet the ongoing requirements for your roles, including any new requirements, should the Company’s policies or protocols change with regard to COVID-19 vaccination.