Pki Engineer Jobs in Minnesota (NOW HIRING)

Authentication Services Leader – Cybersecurity Identity & Access Management Collaborate with Innovative 3Mers Around the World. Choosing where to start and grow your career has a major impact on your professional and personal life, so it's equally important that the company you choose to work at, and its leaders, support and guide you. With a wide variety of people, global locations, technologies and products, 3M is a place where you can collaborate with other curious, creative 3Mers. This position provides an opportunity to transition from other private, public, government, or military experience into a leadership role at 3M. Responsibilities Lead and develop a high-performing IAM team, fostering a culture of innovation, accountability, and continuous improvement. Define and execute the strategic roadmap for authentication services, including Single Sign-On (SSO), Multi‐Factor Authentication (MFA), and Active Directory architecture. Serve as a technical authority on authentication technologies, with deep expertise in Microsoft's Identity stack, including: Microsoft Entra ID (formerly Azure AD): tenant configuration, hybrid identity, conditional access, identity protection, and seamless SSO. Active Directory (AD): expert‐level design, architecture, optimization, group policy management, replication, and domain controller operations. Microsoft Entra ID Governance: access reviews, entitlement management, lifecycle workflows, and privileged identity management (PIM). Microsoft Entra External ID: B2B and B2C federation and external user collaboration. Provide expert‐level guidance on directory services, including Active Directory, LDAP, and ADFS, ensuring secure and efficient identity resolution and authentication. Drive adoption of modern federation and authentication protocols, including SAML, OAuth, and OIDC, across internal and external platforms. Collaborate with senior leadership and cross‐functional teams to integrate IAM strategies with enterprise architecture, cloud transformation, and Zero Trust initiatives. Ensure compliance with regulatory frameworks (SOX, HIPAA, PCI‐DSS, ISO 27001) through effective access controls and audit practices. Evaluate emerging technologies and trends, recommending enhancements to authentication infrastructure and user experience. Mentor and coach team members, promoting technical excellence and career growth. Manage vendor relationships and contracts related to IAM platforms and services. Your Skills and Expertise Minimum Requirements High School Diploma (verified and completed prior to start) and 8 years of experience in Information Technology, Computer Science, IAM Engineering, or Information Security in a private, public, government, or military environment. Bachelor's degree or higher (verified and completed prior to start) and Six (6) years of experience in Information Technology, Computer Science, IAM Engineering, or Information Security, in a private, public, government, or military environment. Three (3) years of experience in a leadership or managerial role. Additional Qualifications Expert‐level experience in Active Directory design, architecture, and optimization. Deep expertise in Microsoft Identity technologies including Entra ID, Active Directory, LDAP, and ADFS. Strong understanding of federation protocols such as SAML, OAuth, and OIDC. Relevant certifications (e.g., CISSP, CISM, Microsoft Certified: Identity and Access Administrator Associate). Strong understanding of cloud identity management (AWS, Azure, GCP). Experience implementing Zero Trust architectures. Proficiency in scripting and automation (PowerShell, Python, SQL). Familiarity with CIAM, PKI, and certificate management. Strong communication, stakeholder engagement, and project management skills. Ability to translate complex technical concepts into strategic business outcomes. Work Location On‐site in Maplewood, MN, or Austin, TX office at least 4 days per week. Travel May include up to 15% domestic/international travel. Relocation Assistance Not authorized. Legal Authorization Must be legally authorized to work in the country of employment without sponsorship for employment visa status (e.g., H1B). Compensation and Benefits The expected compensation range for this position is $164,612–$201,193, which includes base pay plus variable incentive pay, if eligible. This range represents a good faith estimate for this position. The specific compensation offered to a candidate may vary based on factors including, but not limited to, the candidate's relevant knowledge, training, skills, work location, and/or experience. In addition, this position may be eligible for a range of benefits (Medical, Dental & Vision, Health Savings Accounts, Health Care & Dependent Care Flexible Spending Accounts, Disability Benefits, Life Insurance, Voluntary Benefits, Paid Absences and Retirement Benefits, etc.). Additional information is available at https://www.3m.com/3M/en_US/careers-us/working-at-3m/benefits/. Posting Information Good Faith Posting Date Range 07/15/2026 To 08/14/2026 or until filled. EEO Statement 3M does not discriminate in hiring or employment on the basis of race, color, sex, national origin, religion, age, disability, veteran status, or any other characteristic protected by applicable law. #J-18808-Ljbffr