Senior Information Security Manager - Active Directory / Entra ID

Additional Location(s): US-MN-Arden Hills; US-MA-Marlborough

Diversity - Innovation - Caring - Global Collaboration - Winning Spirit - High Performance

At Boston Scientific, we’ll give you the opportunity to harness all that’s within you by working in teams of diverse and high-performing employees, tackling some of the most important health industry challenges. With access to the latest tools, information and training, we’ll help you in advancing your skills and career. Here, you’ll be supported in progressing – whatever your ambitions.       

About the role:

Boston Scientific was recognized as a Glassdoor Best Place to Work in 2026, ranking No. 15 on the Top 100 list, reflecting the culture our employees experience every day.

At Boston Scientific, we're committed to advancing science for life by delivering innovative solutions that improve patient health. Our technology teams play a critical role in enabling this mission by protecting enterprise systems, strengthening cybersecurity and building reliable, scalable technology platforms.

The Senior Manager, Identity & Access Management (IAM), leads the engineering teams responsible for Active Directory (AD), Microsoft Entra ID and hybrid identity services across Boston Scientific's global technology environment. This role provides strategic and operational leadership for the security, reliability, resilience, performance and modernization of critical enterprise identity platforms. The Senior Manager directly leads highly technical individual contributors, including senior and principal-level engineers, while driving engineering excellence, operational maturity and continuous improvement. As a key technology leader, you will collaborate with Infrastructure, Cloud, Cybersecurity and other cross-functional teams to advance secure identity capabilities, strengthen enterprise resilience and support Boston Scientific's evolving business and technology needs.

Work model, sponsorship, relocation:

At Boston Scientific, we value collaboration and synergy. This role follows a hybrid work model requiring employees to be in our local office at least three days per week. Boston Scientific will not offer sponsorship or take over sponsorship of an employment visa for this position at this time. Relocation assistance is not available for this position at this time.

Locations: Arden Hills Minnesota or Marlborough, Massachusetts.

Your responsibilities will include:

• Lead, coach and develop engineering teams responsible for Active Directory, Microsoft Entra ID and hybrid identity services, including senior and principal-level technical individual contributors.

• Define and execute identity platform strategies, technology roadmaps, engineering priorities and modernization initiatives aligned with enterprise security and business objectives.

• Oversee Active Directory engineering and operations, including domain controller deployment, promotion, configuration, monitoring, maintenance and decommissioning.

• Ensure continuous monitoring and operational health of domain controllers, replication, authentication, directory synchronization, DNS dependencies and other critical identity services.

• Establish and maintain robust backup, recovery and resilience capabilities, including regular validation and testing of Active Directory recovery readiness.

• Drive Active Directory security hardening, lifecycle management, vulnerability remediation, technical debt reduction and mitigation of operational risks.

• Partner with Infrastructure teams on Windows Server patching, operating system upgrades, vulnerability remediation and configuration changes affecting domain controllers.

• Ensure engineering teams test and validate operating system-level changes before production deployment and verify Active Directory health and functionality following implementation.

• Lead Microsoft Entra ID engineering, operations and modernization, including Conditional Access, multifactor authentication (MFA), passwordless authentication, Identity Protection, Privileged Identity Management (PIM), enterprise applications and hybrid identity integration.

• Advance Zero Trust architecture, least-privilege access, automation, standardization and secure identity engineering practices across enterprise platforms.

• Define, monitor and report service health and operational performance metrics, including availability, replication, backup and recovery readiness, vulnerabilities, lifecycle risks and technical debt.

• Lead incident response, technical investigations, root-cause analysis and corrective actions for significant identity service incidents and platform issues.

• Foster a culture of engineering excellence, accountability, collaboration, continuous improvement and proactive risk management.

• Collaborate with Infrastructure, Cloud, Security Operations, Enterprise Architecture, Microsoft 365, Manufacturing and Operational Technology (OT), and adjacent IAM teams to deliver secure, reliable and scalable identity services.

Required qualifications:

• Bachelor's degree in computer science, information technology, cybersecurity, engineering or a related discipline, or equivalent practical experience.
• Minimum 8 years in  in identity and access management, Active Directory, Microsoft Entra ID, cybersecurity or identity engineering.
• Demonstrated experience leading, coaching and developing highly technical engineering teams, including senior-level individual contributors.
• Strong knowledge of Active Directory architecture and operations, including domain controllers, replication, authentication, Group Policy, DNS dependencies, monitoring, backup and recovery.
• Strong knowledge of Microsoft Entra ID, modern authentication, Conditional Access, privileged identity management and hybrid identity architectures.
• Experience leading enterprise security remediation, platform resilience, disaster recovery or technology modernization initiatives.
• Strong understanding of Zero Trust architecture, least-privilege principles, privileged identity management and enterprise identity security practices.
• Demonstrated ability to establish engineering priorities, manage operational risks and drive accountability for critical technology services.
• Strong leadership, stakeholder management, strategic planning, problem-solving and executive communication skills.

Preferred qualifications:

• Experience working in a large, global or highly regulated enterprise environment.

• Experience supporting identity infrastructure and services across enterprise IT, manufacturing and operational technology environments.

• Experience in the medical device, health care, life sciences, pharmaceutical or complex manufacturing industries.

• Familiarity with adjacent identity and cybersecurity technologies, including CyberArk, Saviynt, CrowdStrike Falcon Identity, public key infrastructure (PKI) and secrets management.

• Relevant Microsoft identity or security certifications, Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Cloud Security Professional (CCSP) or comparable professional certifications.

Requisition ID: 637173

Minimum Salary: $125800 

Maximum Salary: $239000 

The anticipated compensation listed above and the value of core and optional employee benefits offered by Boston Scientific (BSC) – see www.bscbenefitsconnect.com—will vary based on actual location of the position and other pertinent factors considered in determining actual compensation for the role. Compensation will be commensurate with demonstrable level of experience and training, pertinent education including licensure and certifications, among other relevant business or organizational needs. At BSC, it is not typical for an individual to be hired near the bottom or top of the anticipated salary range listed above.

Compensation for non-exempt (hourly), non-sales roles may also include variable compensation from time to time (e.g., any overtime and shift differential) and annual bonus target (subject to plan eligibility and other requirements).

Compensation for exempt, non-sales roles may also include variable compensation, i.e., annual bonus target and long-term incentives (subject to plan eligibility and other requirements).

For MA positions: It is unlawful to require or administer a lie detector test for employment. Violators are subject to criminal penalties and civil liability.

Boston Scientific transforms lives through innovative medical technologies that improve the health of patients around the world. As a global medical technology leader for more than 45 years, we advance science for life by providing a broad range of high-performance solutions that address unmet patient needs and reduce the cost of healthcare. Our portfolio of devices and therapies helps physicians diagnose and treat complex cardiovascular, respiratory, digestive, oncological, neurological and urological diseases and conditions. Learn more at www.bostonscientific.com and follow us on LinkedIn.

Boston Scientific Corporation has been and will continue to be an equal opportunity employer. To ensure full implementation of its equal employment policy, the Company will continue to take steps to assure that recruitment, hiring, assignment, promotion, compensation, and all other personnel decisions are made and administered without regard to race, religion, color, national origin, citizenship, sex, sexual orientation, gender identity, gender expression, veteran status, age, mental or physical disability, genetic information or any other protected class.

Please be advised that certain US based positions, including without limitation field sales and service positions that call on hospitals and/or health care centers, require acceptable proof of COVID-19 vaccination status.  Candidates will be notified during the interview and selection process if the role(s) for which they have applied require proof of vaccination as a condition of employment.  Boston Scientific continues to evaluate its policies and protocols regarding the COVID-19 vaccine and will comply with all applicable state and federal law and healthcare credentialing requirements.   As employees of the Company, you will be expected to meet the ongoing requirements for your roles, including any new requirements, should the Company’s policies or protocols change with regard to COVID-19 vaccination.