Principal Authentication Services Engineer (IAM)

Location: Maplewood, Minnesota or Austin, Texas; hybrid with at least 3 days per week onsite. Travel may include up to 10%. Relocation assistance may be authorized. Must be legally authorized to work in the United States without employment visa sponsorship.

Expected compensation: $164,612–$201,193, including base pay and variable incentive pay if eligible.

Company

hirify.global is a global company with locations, technologies, products, and teams around the world.

What you will do

• Own the architecture, engineering, implementation, and operational health of Microsoft Entra ID, Active Directory, and federated identity services.
• Architect and maintain SSO integrations using SAML, OIDC, and OAuth 2.0 across SaaS, on-premises, and hybrid applications.
• Engineer MFA policies and authentication methods, including FIDO2, Windows Hello for Business, and certificate-based authentication.
• Lead Conditional Access policy development, testing, governance, and lifecycle management.
• Define authentication standards, patterns, reference architectures, technical documentation, and roadmap recommendations.
• Support Zero Trust alignment, audits, remediation, complex incident escalations, cross-functional collaboration, and mentoring of mid-level engineers.

Requirements

• Bachelor’s degree or higher, completed and verified before starting.
• At least 8 years of experience designing, deploying, and managing enterprise IAM authentication solutions, such as Entra ID, Ping Identity, or Active Directory, in a private, public, government, or military environment.
• At least 5 years of experience with modern authentication protocols including SAML, OAuth 2.0, OpenID Connect (OIDC), and FIDO2 in a private, public, government, or military environment.
• At least 5 years of experience leading complex architectural initiatives, Conditional Access hardening, or Zero Trust security programs in a private, public, government, or military environment.
• Ability to work onsite at least 3 days per week in Maplewood, Minnesota or Austin, Texas.
• Ability to work in the country of employment without employment visa sponsorship.

Culture & Benefits

• Collaboration with colleagues across global locations, technologies, and products.
• Programs supporting physical and financial well-being.
• Benefits may include medical, dental, vision, health savings accounts, flexible spending accounts, disability and life insurance, paid absences, and retirement benefits.
• Employees are expected to follow corporate policies, procedures, security standards, and environmental health and safety requirements.
• US full-time employees must sign an employee agreement covering confidential information, trade secrets, conflicts of interest, and invention assignment.

Hiring process

• Provide education and work history by uploading a resume or entering the information directly in the application.