MathWorks
Sr. Identity Security Engineer Active Directory & Entra ID
🇺🇸
Natick, MA
🕑
Full-Time
💰
$122K - $190K
💻
Cybersecurity
🗓️
August 11th, 2026
CI/CD
ISO 27001
Edtech.com's Summary
MathWorks is hiring a Sr. Identity Security Engineer Active Directory & Entra ID. The role involves engineering and supporting enterprise identity capabilities across Active Directory, Microsoft Entra ID, hybrid identity, and privileged access while collaborating with various teams to strengthen access controls and improve identity platforms using automation and repeatable engineering practices.
Highlights
- Engineer and enhance core identity platforms such as Active Directory and Microsoft Entra ID.
- Implement authentication, authorization, privileged access, and identity governance for human and non-human identities.
- Enhance security, resilience, and recoverability of identity services through platform hardening and monitoring.
- Develop automation, scripts, and documentation to improve operational efficiency.
- Collaborate with cross-functional teams to implement identity patterns and guardrails for applications and AI-enabled systems.
- Provide technical guidance, participate in design reviews, and troubleshoot complex identity platform issues.
- Engage in operational support, incident response, root cause analysis, and continuous improvement efforts.
- Required: Bachelor’s degree with 6 years experience (or advanced degree equivalents), and expertise with Active Directory.
- Preferred skills include knowledge of hybrid identity, federation, privileged access, identity threat detection, and automation with PowerShell or similar scripting.
- Experience with security frameworks such as NIST and ISO 27001 and interest in emerging identity patterns for AI and automation platforms.
- Salary range: $122,300 to $189,600 USD.
Sr. Identity Security Engineer Active Directory & Entra ID Full Description
Sr. Identity Security Engineer Active Directory & Entra ID
- Team: Information Technology
- Location: US-MA-Natick
- Salary Range: USD 122,300 - 189,600
Job Summary
Do you enjoy solving complex identity challenges and building secure, reliable identity services that enable the business?
Join our Identity and Access Management team, where you will engineer and support enterprise identity capabilities across Active Directory, Microsoft Entra ID, hybrid identity, privileged access, and non-human identities. You will collaborate with security, cloud, IT, and application teams to improve identity platforms, strengthen access controls, and implement secure patterns for applications, services, and emerging AI-enabled systems.
In this role, you will apply strong hands-on engineering skills to enhance the security, reliability, and governance of core identity services while using automation and repeatable practices to make those services more consistent, scalable, and resilient.
Responsibilities
- Engineer, configure, and improve core identity platforms and capabilities, including Active Directory, Microsoft Entra ID, hybrid identity, and non-human identities.
- Implement and support authentication, authorization, privileged access, and identity governance controls across human and non-human identities.
- Contribute to the security, resilience, and recoverability of enterprise identity services through platform hardening, monitoring, operational readiness, troubleshooting, and recovery exercises.
- Build and maintain automation, scripts, documentation, and repeatable engineering processes that improve consistency, reliability, and operational efficiency.
- Partner with senior engineers and cross-functional teams to implement identity patterns and guardrails for applications, services, AI-enabled systems, and automation platforms.
- Provide technical guidance to project teams, participate in design reviews, and help resolve complex identity platform issues.
- Participate in operational support, incident response, root-cause analysis, and continuous improvement for identity services.
Minimum Qualifications
- A bachelor's degree and 6 years of professional work experience (or a master's degree and 3 years of professional work experience, or a PhD degree, or equivalent experience) is required.
- Expertise with active directory
Additional Qualifications
A successful candidate will have experience in many of the following areas:
- Enterprise identity platforms, including Active Directory, Microsoft Entra ID, hybrid identity, federation, provisioning, and authentication technologies.
- Identity security practices, including privileged access, administrative tiering, identity threat detection and response, recovery planning, and platform hardening.
- Workload and non-human identities, including service principals, managed identities, certificates, secrets, application permissions, and federated credentials.
- IAM engineering and automation, including PowerShell or other scripting languages, APIs, configuration-as-code, Git-based workflows, and CI/CD practices.
- Application identity and permission governance, including app registrations, delegated and application permissions, consent models, and least-privilege access design.
- Troubleshooting complex identity, authentication, synchronization, and authorization issues across hybrid environments.
- Working knowledge of security and regulatory frameworks such as NIST, ISO 27001, and similar standards.
- Interest in emerging identity patterns supporting AI-enabled systems, automation platforms, and agentic workflows.
Similar Jobs
Director of Information Security
Oberlin College
🇺🇸 Oberlin, OH
Information Security Analysts
University of Utah
🇺🇸 Salt Lake City, UT
Senior Director of Infrastructure & Cybersecurity
Elevo
🇺🇸 Hybrid - Irvine, CA
Artificial Intelligence and Cybersecurity 12-month Faculty / Lab Director (GA002)
Brightpoint Community College
🇺🇸 Chesterfield, VA
Senior Cyber Threat Hunter
Western Governors University
🇺🇸 Raleigh, NC
