# Principal Authentication Services Engineer

**Company**: 3M
**Location**: Austin, Texas
**Work arrangement**: hybrid
**Experience**: senior
**Job type**: full-time
**Salary**: $164,612 - $201,193
**Category**: Engineering
**Industry**: Technology
**Wikidata**: https://www.wikidata.org/wiki/Q159433

**Apply**: https://3m.wd1.myworkdayjobs.com/en-US/Search/job/US-Texas-Austin/Principal-Authentication-Services-Engineer_R01172870-1?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_0fe50386-46f

## Description

We are seeking a Principal Authentication Services Engineer to join our Identity & Access Management organization. As a senior technical leader and subject matter expert, you will own the architecture, engineering, and lifecycle management of enterprise authentication platforms across a complex global environment.

Responsibilities:

- Own the engineering design, implementation, and operational health of Microsoft Entra ID, Active Directory, and federated identity services across the enterprise

- Architect and maintain SSO integrations (SAML, OIDC, OAuth 2.0) across SaaS, on-prem, and hybrid application portfolios

- Engineer and manage MFA policies, authentication method configurations, and phishing-resistant credential adoption (FIDO2, Windows Hello for Business, certificate-based auth)

- Lead Conditional Access policy development, testing, and lifecycle governance

- Define authentication standards, patterns, and reference architectures for new and existing applications -- and own keeping them current

- Evaluate emerging authentication technologies and drive proof-of-concept efforts that inform roadmap decisions

- Maintain technical documentation including architecture diagrams, decision records, and runbooks

Security & Compliance:

- Partner with Security Architecture to align authentication controls with Zero Trust principles and enterprise security policy

- Support audit and compliance activities by providing technical evidence, control narratives, and remediation guidance

- Identify gaps in authentication posture and lead engineering remediation efforts

Collaboration & Leadership:

- Serve as escalation point for complex authentication incidents and engineering challenges

- Mentor and uplift mid-level engineers on the Authentication Services team

- Engage with application teams, infrastructure engineering, and security operations as a trusted IAM authority.

Requirements:

- Bachelor’s degree or higher

- Eight (8) years of experience designing, deploying, and managing enterprise Identity and Access Management (IAM) authentication solutions

- Five (5) years of experience working with modern authentication protocols, including SAML, OAuth 2.0, OpenID Connect (OIDC), and FIDO2

- Five (5) years of experience leading complex architectural initiatives, conditional access hardening, or Zero Trust security programs

## Skills

### Required
- Microsoft Entra ID
- Active Directory
- SAML
- OAuth 2.0
- OpenID Connect (OIDC)
- FIDO2
- Conditional Access

---

Source: [Apply at 3m.wd1.myworkdayjobs.com](https://3m.wd1.myworkdayjobs.com/en-US/Search/job/US-Texas-Austin/Principal-Authentication-Services-Engineer_R01172870-1?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)