Authentication Services Leader – Cybersecurity Identity & Access Management

Authentication Services Leader – Cybersecurity Identity & Access Management

Collaborate with Innovative 3

Mers Around the World. Choosing where to start and grow your career has a major impact on your professional and personal life, so it’s equally important that the company you choose to work at, and its leaders, support and guide you. With a wide variety of people, global locations, technologies and products, 3M is a place where you can collaborate with other curious, creative 3

Mers.

This position provides an opportunity to transition from other private, public, government, or military experience into a leadership role at 3M.

• Lead and develop a high-performing IAM team, fostering a culture of innovation, accountability, and continuous improvement.
• Define and execute the strategic roadmap for authentication services, including Single Sign-On (SSO), Multi‑Factor Authentication (MFA), and Active Directory architecture.
• Serve as a technical authority on authentication technologies, with deep expertise in Microsoft’s Identity stack, including:
  • Microsoft Entra  (formerly Azure AD): tenant configuration, hybrid identity, conditional access, identity protection, and seamless SSO.
  • Active Directory (AD): expert‑level design, architecture, optimization, group policy management, replication, and domain controller operations.
  • Microsoft Entra : access reviews, entitlement management, lifecycle workflows, and privileged identity management (PIM).
  • Microsoft Entra External : B2B and B2C federation and external user collaboration.
• Provide expert‑level guidance on directory services, including Active Directory, LDAP, and ADFS, ensuring secure and efficient identity resolution and authentication.
• Drive adoption of modern federation and authentication protocols, including SAML, OAuth, and OIDC, across internal and external platforms.
• Collaborate with senior leadership and cross‑functional teams to integrate IAM strategies with enterprise architecture, cloud transformation, and Zero Trust initiatives.
• Ensure compliance with regulatory frameworks (SOX, HIPAA, PCI‑DSS, ISO 27001) through effective access controls and audit practices.
• Evaluate emerging technologies and trends, recommending enhancements to authentication infrastructure and user experience.
• Mentor and coach team members, promoting technical excellence and career growth.
• Manage vendor relationships and contracts related to IAM platforms and services.

• High School Diploma (verified and completed prior to start) and 8 years of experience in Information Technology, Computer Science, IAM Engineering, or Information Security in a private, public, government, or military environment.
• Bachelor’s degree or higher (verified and completed prior to start) and Six (6) years of experience in Information Technology, Computer Science, IAM Engineering, or Information Security, in a private, public, government, or military environment.
• Three (3) years of experience in a leadership or managerial role.

• Expert‑level experience in Active Directory design, architecture, and optimization.
• Deep expertise in Microsoft Identity technologies including Entra , Active Directory, LDAP, and ADFS.
• Strong understanding of federation protocols such as SAML, OAuth, and OIDC.
• Relevant certifications (e.g., CISSP, CISM, Microsoft Certified: Identity and Access Administrator Associate).
• Strong understanding of cloud identity management (AWS, Azure, GCP).
• Experience implementing Zero Trust architectures.
• Proficiency in scripting and automation (Power Shell, Python, SQL).
• Familiarity with CIAM, PKI, and certificate management.
• Strong communication, stakeholder engagement, and project management skills.
• Ability to translate complex technical concepts into strategic business outcomes.

• On‑site in Maplewood, MN, or Austin, TX office at least 4 days per week.

May include up to 15% domestic/international travel.

Not authorized.

Must be legally authorized to work in the country of employment without sponsorship for employment visa status (e.g., H1B).

The…