About this role
Role Overview We are seeking a Principal Engineer – Identity & Access Management (IAM) to serve as the technical authority and architectural owner for enterprise and customer-facing authentication, authorization, and directory services. This role underpins the availability, security, and continuity of global digital platforms and business-critical environments. This is a deeply technical, hands-on principal role requiring architectural-level expertise across Active Directory, Entra ID (Azure AD & B2C), Oracle Unified Directory (OUD), and Linux/Unix authentication systems, operating within a complex hybrid identity ecosystem. The role is mission critical: failures in identity architecture directly translate into widespread access disruption, security exposure, productivity loss, and compliance risk. This engineer will eliminate single points of failure, strengthen directory security posture, support M&A integrations, and ensure identity services scale securely and reliably across all regions.
Key Responsibilities IAM & Directory Services Architecture Ownership
• Act as the principal technical owner for global IAM and directory services platforms supporting enterprise, partner, and customer-facing applications • Define, document, and evolve end-to-end IAM architecture, including: • Active Directory (enterprise-scale, hybrid, multi-region) • Entra ID / Azure AD (including B2C and external identities) • Oracle Unified Directory (OUD) • Linux and Unix authentication and authorization integrations
• Establish reference architectures, engineering standards, and operational patterns for identity platforms • Design for high availability, fault tolerance, disaster recovery, and regional resilience Authentication & Authorization Reliability
• Ensure continuous availability of authentication and authorization services by proactively managing identity dependencies • Own directory synchronization, federation, and authentication flows across hybrid environments • Eliminate architectural and operational single points of failure • Prevent identity issues that could result in: • Global user access degradation • Business application downtime • Customer- and partner-facing access disruption
Security, Zero Trust & Risk Reduction
• Make identity the primary control plane for Zero Trust initiatives • Enforce least privilege, strong authentication, and continuous verification • Design and implement RBAC, ABAC, and policy-based authorization models • Strengthen directory security posture by addressing: • Privileged access exposure • Legacy protocols and weak authentication mechanisms • Inconsistent policy enforcement and configuration drift
• Reduce identity-based attack paths and systemic access risk Non-Human, AI & Machine Identity Protection
• Architect and secure non-human identities, including: • AI agent identities • Robotic Process Automation (RPA) identities • Service accounts, workloads, APIs, and system identities
• Define lifecycle management, authentication, authorization, and rotation strategies for machine identities • Prevent credential sprawl, over-privileged access, and unmanaged secrets • Ensure AI and robotic identities adhere to Zero Trust, least privilege, and auditable access principles • Integrate non-human identity controls into enterprise IAM governance and monitoring Integration & User Experience
• Improve identity integration across: • Enterprise applications • Partner platforms • Customer-facing (B2C) ecosystems
• Ensure seamless, low-friction authentication experiences without compromising security • Enable scalable access models for human and non-human identities Mergers & Acquisitions (M&A) Support
• Serve as the IAM technical lead for M&A initiatives • Assess acquired company identity architectures, directory services, and authentication models • Design and execute secure identity integration, consolidation, or coexistence strategies • Mitigate access risk during transitions while maintaining business continuity • Ensure acquired environments align with enterprise IAM, Zero Trust, and security standards Continuity, Innovation & Long-Term Strategy
• Ensure knowledge continuity and eliminate dependency on individual resources • Define a multi-year IAM and directory services roadmap aligned with enterprise architecture and Zero Trust maturity • Evaluate emerging identity technologies, protocols, and access models, including AI-driven identity use cases • Mentor engineers and elevate IAM engineering maturity across the organization
Required Qualifications Experience
• 12+ years of experience in Identity & Access Management, directory services, or security platform engineering • Proven experience supporting global, highly available, business-critical identity systems Technical Expertise
• Architectural-level expertise in: • Active Directory (enterprise and hybrid environments) • Entra ID / Azure AD, including B2C • Oracle Unified Directory (OUD) • Linux and Unix authentication mechanisms
• Strong understanding of: • Authentication and authorization flows • Identity federation and synchronization • RBAC, ABAC, and policy-driven access models • Zero Trust and identity-centric security architecture
• Hands-on experience with identity protocols: • SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), Kerberos, LDAP/LDAPS, SCIM, RADIUS, SSH key-based authentication, PAM (Pluggable Authentication Modules) for Linux, certificate-based authentication (X.509), and modern API-based identity integrations, etc.
• Experience with automation and integration: • PowerShell, Python, APIs, infrastructure-as-code preferred
Architectural & Leadership Skills
• Ability to design for availability, resilience, and failure scenarios • Strong systems thinking and long-term technical judgment • Proven ability to influence architecture and strategy across teams without formal authority • Comfortable operating in ambiguous, high-impact environments
Preferred Qualifications
• Experience supporting customer-facing digital platforms at global scale • Cloud IAM experience across Azure, AWS, and/or GCP • Familiarity with identity governance, privileged access, and compliance frameworks • Experience working with globally distributed teams, including India-based engineering support models • Prior experience supporting identity integration during M&A activities
Why This Role Is Critical Identity is a Tier-0 dependency. Without a resilient, well-architected IAM foundation, failures in authentication, authorization, or machine identity control quickly become enterprise-wide risk events. This role directly protects the organization from:
• Identity-driven downtime and degraded user access • Over-privileged or unmanaged AI, robotic, and service identities • Increased risk during mergers, acquisitions, and integrations • Delays or failures in Zero Trust adoption • Compliance exposure and erosion of trust This Principal Engineer ensures continuity, resilience, and long-term sustainabiliy of identity services—across humans, machines, and AI—that the business depends on every day.
More information about NXP in India...
#LI-7013