Principal IAM Engineer - Directory Services

Job Responsibilities

JOB RESPONSIBILITIES

• Lead the engineering, administration, security, and modernization of Active Directory, Entra ID, Azure AD services, LDAP directories, and hybrid identity infrastructure.

• Design and implement directory security controls, including AD hardening, Group Policy management, CIS benchmark compliance, privileged access controls, and identity-related vulnerability remediation.

• Develop and maintain IAM automation, integrations, and operational tooling using PowerShell, Microsoft Graph, PowerBI, KQL, SQL, REST APIs, and Azure DevOps.

• Build reporting and auditing solutions to support access reviews, compliance monitoring, account governance, and executive reporting using SQL and PowerBI.

• Participate in the design, governance, and lifecycle management of non-human identities (NHI), including service accounts, application identities, certificates, secrets, and machine-to-machine authentication.

• Troubleshoot and resolve complex AD, Entra ID, authentication/authorization, and identity governance issues using data-driven root cause analysis.

• Support audit, compliance, and regulatory requirements through evidence collection, control validation, and access certifications.

• Create and maintain architecture diagrams, standards, runbooks, operational procedures, and technical documentation.

• Serve as a senior technical leader and escalation point for directory services, identity governance, NHI, automation, and access management initiatives.

• Provide guidance and mentorship to junior engineers and foster the advancement of technical skills across the team. Promote a culture of continuous improvement and knowledge sharing.

QUALIFICATION REQUIREMENTS

• Bachelor’s degree in computer science, Cybersecurity, Engineering, or related field.
• At least 8+ years of experience in IAM, Directory Services, Infrastructure, and/or Security Engineering, including administration and support of enterprise identity platforms.

• Strong hands-on experience with Active Directory, Entra ID, Azure AD, hybrid identity architecture, identity governance, authentication, authorization, and access management.

• Considerable knowledge of Active Directory security, Group Policy management, CIS benchmark remediation, identity-related vulnerability management, and security logging.

• Experience managing Non-Human Identities (NHI), including service accounts, application identities, certificates, secrets, credential rotation, and lifecycle governance.

• Expertise in developing automation, integrations, and operational tooling using PowerShell, Microsoft Graph, SQL, KQL, REST APIs, JSON, Azure Automation, Logic Apps, Power BI, and Azure DevOps.

• Ability to design and develop reporting, auditing, and analytics solutions for access governance, compliance monitoring, account lifecycle management, and identity security operations.

• Experience integrating identity platforms with enterprise systems such as Saviynt IGA, ServiceNow, Workday, Microsoft 365, and cloud services.

• Solid understanding of Zero Trust, least privilege, identity governance, privileged access, authentication, authorization, audit controls, and regulatory compliance requirements.

• Familiarity with PAM platforms and privileged account management processes preferred.

• Knowledge of regulated environments, including healthcare, life sciences, or CRO organizations preferred.

• Proven ability to lead technical initiatives, mentor engineers, create operational documentation, and communicate effectively with technical and business stakeholders.

• Self-directed and able to manage individual projects or work as part of a larger team.

• Excellent written and verbal communications; Solid written and oral presentation skills.

Get to know Syneos Health

Over the past 5 years, we have worked with 94% of all Novel FDA Approved Drugs, 95% of EMA Authorized Products and over 200 Studies across 73,000 Sites and 675,000+ Trial patients.

No matter what your role is, you’ll take the initiative and challenge the status quo with us in a highly competitive and ever-changing environment. Learn more about Syneos Health.

http://www.syneoshealth.com

Additional Information

Tasks, duties, and responsibilities as listed in this job description are not exhaustive. The Company, at its sole discretion and with no prior notice, may assign other tasks, duties, and job responsibilities. Equivalent experience, skills, and/or education will also be considered so qualifications of incumbents may differ from those listed in the Job Description. The Company, at its sole discretion, will determine what constitutes as equivalent to the qualifications described above. Further, nothing contained herein should be construed to create an employment contract. Occasionally, required skills/experiences for jobs are expressed in brief terms. Any language contained herein is intended to fully comply with all obligations imposed by the legislation of each country in which it operates, including the implementation of the EU Equality Directive, in relation to the recruitment and employment of its employees. The Company is committed to compliance with the Americans with Disabilities Act, including the provision of reasonable accommodations, when appropriate, to assist employees or applicants to perform the essential functions of the job.