Arden Hills Senior Information Security Manager Active Directory Entra ID MN 55112

Job description

Additional Location(s): US-MN-Arden Hills; US-MA-Marlborough Diversity - Innovation - Caring - Global Collaboration - Winning Spirit - High Performance At Boston Scientific, we’ll give you the opportunity to harness all that’s within you by working in teams of diverse and high-performing employees, tackling some of the most important health industry challenges. With access to the latest tools, information and training, we’ll help you in advancing your skills and career. Here, you’ll be supported in progressing – whatever your ambitions. About the role: Boston Scientific was recognized as a Glassdoor Best Place to Work in 2026, ranking No. 15 on the Top 100 list, reflecting the culture our employees experience every day. At Boston Scientific, we're committed to advancing science for life by delivering innovative solutions that improve patient health. Our technology teams play a critical role in enabling this mission by protecting enterprise systems, strengthening cybersecurity and building reliable, scalable technology platforms. The Senior Manager, Identity & Access Management (IAM), leads the engineering teams responsible for Active Directory (AD), Microsoft Entra ID and hybrid identity services across Boston Scientific's global technology environment. This role provides strategic and operational leadership for the security, reliability, resilience, performance and modernization of critical enterprise identity platforms. The Senior Manager directly leads highly technical individual contributors, including senior and principal-level engineers, while driving engineering excellence, operational maturity and continuous improvement. As a key technology leader, you will collaborate with Infrastructure, Cloud, Cybersecurity and other cross-functional teams to advance secure identity capabilities, strengthen enterprise resilience and support Boston Scientific's evolving business and technology needs. Work model, sponsorship, relocation: At Boston Scientific, we value collaboration and synergy. This role follows a hybrid work model requiring employees to be in our local office at least three days per week. Boston Scientific will not offer sponsorship or take over sponsorship of an employment visa for this position at this time. Relocation assistance is not available for this position at this time. Locations: Arden Hills Minnesota or Marlborough, Massachusetts. Your responsibilities will include: Lead, coach and develop engineering teams responsible for Active Directory, Microsoft Entra ID and hybrid identity services, including senior and principal-level technical individual contributors. Define and execute identity platform strategies, technology roadmaps, engineering priorities and modernization initiatives aligned with enterprise security and business objectives. Oversee Active Directory engineering and operations, including domain controller deployment, promotion, configuration, monitoring, maintenance and decommissioning. Ensure continuous monitoring and operational health of domain controllers, replication, authentication, directory synchronization, DNS dependencies and other critical identity services. Establish and maintain robust backup, recovery and resilience capabilities, including regular validation and testing of Active Directory recovery readiness. Drive Active Directory security hardening, lifecycle management, vulnerability remediation, technical debt reduction and mitigation of operational risks. Partner with Infrastructure teams on Windows Server patching, operating system upgrades, vulnerability remediation and configuration changes affecting domain controllers. Ensure engineering teams test and validate operating system-level changes before production deployment and verify Active Directory health and functionality following implementation. Lead Microsoft Entra ID engineering, operations and modernization, including Conditional Access, multifactor authentication (MFA), passwordless authentication, Identity Protection, Privileged Identity Management (PIM), enterprise applications and hybrid identity integration. Advance Zero Trust architecture, least-privilege access, automation, standardization and secure identity engineering practices across enterprise platforms. Define, monitor and report service health and operational performance metrics, including availability, replication, backup and recovery readiness, vulnerabilities, lifecycle risks and technical debt. Lead incident response, technical investigations, root-cause analysis and corrective actions for significant identity service incidents and platform issues. Foster a culture of engineering excellence, accountability, collaboration, continuous improvement and proactive risk management. Collaborate with Infrastructure, Cloud, Security Operations, Enterprise Architecture, Microsoft 365, Manufacturing and Operational Technology (OT), and adjacent IAM teams to deliver secure, reliable and scalable identity services. Required qualifications: Bachelor's degree in computer science, information technology, cybersecurity, engineering or a related discipline, or equivalent practical experience. Minimum 8 years in in identity and access management, Active Directory, Microsoft Entra ID, cybersecurity or identity engineering. Demonstrated experience leading, coaching and developing highly technical engineering teams, including senior-level individual contributors. Strong knowledge of Active Directory architecture and operations, including domain controllers, replication, authentication, Group Policy, DNS dependencies, monitoring, backup and recovery. Strong knowledge of Microsoft Entra ID, modern authentication, Conditional Access, privileged identity management and hybrid identity architectures. Experience leading enterprise security remediation, platform resilience, disaster recovery or technology modernization initiatives. Strong understanding of Zero Trust architecture, least-privilege principles, privileged identity management and enterprise identity security practices. Demonstrated ability to establish engineering priorities, manage operational risks and drive accountability for critical technology services. Strong leadership, stakeholder management, strategic planning, problem-solving and executive communication skills. Preferred qualifications: Experience working in a large, global or highly regulated enterprise environment. Experience supporting identity infrastructure and services across enterprise IT, manufacturing and operational technology environments. Experience in the medical device, health care, life sciences, pharmaceutical or complex manufacturing industries. Familiarity with adjacent identity and cybersecurity technologies, including CyberArk, Saviynt, CrowdStrike Falcon Identity, public key infrastructure (PKI) and secrets management. Relevant Microsoft identity or security certifications, Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Cloud Security Professional (CCSP) or comparable professional certifications. Requisition ID: 637173 Minimum Salary: $ 125800 Maximum Salary: $ 239000 The anticipated compensation listed above and the value of core and optional employee benefits offered by Boston Scientific (BSC) – see www.bscbenefitsconnect.com— will vary based on actual location of the position and other pertinent factors considered in determining actual compensation for the role. Compensation will be commensurate with demonstrable level of experience and training, pertinent education including licensure and certifications, among other relevant business or organizational needs. At BSC, it is not typical for an individual to be hired near the bottom or top of the anticipated salary range listed above. Compensation for non-exempt (hourly), non-sales roles may also include variable compensation from time to time (e.g., any overtime and shift differential) and annual bonus target (subject to plan eligibility