Principal IAM Engineer

What's the role?

Are you ready to take your career to the next level? As a Principal IAM Engineer , you will be the senior technical authority for identity services, leading the charge in designing, implementing, and governing enterprise-wide IAM capabilities. This is your chance to blend hands-on engineering with architecture and leadership, driving the modernization of authentication, authorization, identity lifecycle, and privileged access controls across our cloud and on-prem environments.

• Design Ownership: Take charge of the end-to-end technical design of IAM services, ensuring they are secure, scalable, and highly available.
• Integration Leadership: Lead the design and implementation of IAM integrations for SaaS, on-prem, and AWS cloud platforms, including federation (SAML, OIDC, OAuth), MFA, and Passwordless capabilities.
• Issue Resolution: Serve as the primary escalation point for complex IAM engineering issues; perform root-cause analysis and drive long-term remediation.
• Collaboration: Partner with security architecture, infrastructure, application, and HR/IT teams to align IAM solutions with enterprise security strategy and business objectives.
• Standards Definition: Define IAM engineering standards, patterns, and reference architectures; guide other engineers in implementing secure onboarding patterns.
• Modernization Initiatives: Lead initiatives to modernize our IAM capabilities.
• Audit Contributions: Contribute to audits, risk assessments, and regulatory reviews by providing technical evidence and designing compensating controls.
• Mentorship: Mentor and coach IAM engineers and analysts, fostering a culture of continuous learning and improvement.

• 10+ years of experience in information security or infrastructure engineering, with at least 5 years of hands-on experience with core IAM platforms.
• Deep expertise with the majority of our IAM stack.
• Strong hands-on experience with Microsoft Entra  Active Directory, and extensive experience implementing federation protocols (SAML, OIDC, OAuth2).
• Proven track record designing and implementing IAM solutions in hybrid multi-cloud environments.
• Experience with secrets management solutions.
• Proficiency in at least one scripting or programming language (e.g., Power Shell, Python, Java).
• Excellent communication skills to translate complex technical concepts for diverse stakeholders.
• Exceptional sense of ownership and ability to work with limited requirements.
• Experience leading large-scale IAM programs and mentoring teams.
• Demonstrated ability to balance security, usability, and operational efficiency.

Pay Range:

• Start: $
• End: $

Geographic Specific Pay Structure:

• Structure 110: $ - $ USD
• Structure 115: $ - $ USD

We believe in fairness and transparency. Final salaries are based on various factors, including skills, experience, and location.

Grow your career with a best-in-class company! We put our clients' interests at the center of all we do. Join us and enjoy:

• Concierge service
• Employee resource groups

Northwestern Mutual is an equal opportunity employer that welcomes and encourages diversity in the workforce. We are committed to creating an environment where every employee can contribute creative ideas and focus on meeting and exceeding business and personal objectives.

We’re excited about the potential you bring to Northwestern Mutual. Start your journey with us today!