Principal IS Architect
Posted 1hrs ago
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Principal IS Architect leading identity, access, and secrets-management architecture. Supporting Amgen’s biotechnology medicines business through secure enterprise systems and governance.
Responsibilities:
- Lead the design, integration, and support of Amgen’s identity provisioning and entitlement management environment
- Provide technical and governance oversight for Identity Management projects
- Serve as technical architect for analysis, design, and implementation of Identity Management projects
- Lead architecture and integration of enterprise secrets-management and non-human identity capabilities
- Establish patterns for service accounts, application identities, API keys, tokens, certificates, and secrets across cloud, data, and enterprise platforms
- Partner with platform and application teams to implement solutions meeting Amgen security standards and integrating with enterprise IAM
- Provide leadership and day-to-day operational management
- Troubleshoot and manage critical issues
- Guide disaster recovery exercises and plan continuous process improvement
- Coordinate and manage budgets for staff and organizational functions/services
- Manage and implement Cybersecurity & Digital Trust technologies and processes
- Develop business cases and presentations on information security technologies
- Advise project teams, application owners, and Information Security teams on security controls
- Support incident response and mock security incident exercises
- Perform security design consulting and participate in security architecture reviews
- Provide mentorship and training to Cybersecurity & Digital Trust and Amgen teams
- Participate in departmental legal, regulatory, and contractual compliance activities
Requirements:
- Doctorate degree and 2 years of Information Systems and/or Computer Science experience, OR Master’s degree and 4 years, OR Bachelor’s degree and 6 years, OR Associate’s degree and 10 years, OR high school diploma/GED and 12 years
- Knowledge of Web Access Management and SSO technologies, including Entra ID, Okta, Azure, Ping Federate, SAML, OAuth, and OpenID/Connect
- Microsoft Active Directory skills, including AD LDS and Azure AD
- Knowledge of LDAP directories and PKI
- Experience with Amazon AWS and/or Microsoft Azure and Identity and Access Management
- Working knowledge of networking concepts and protocols, LAN, WAN, SSL, Firewall, Load Balancer, and DMZ configurations
- Knowledge of Identity and Access and Role Management applications, including IBM ISIM, IBM IGI, SailPoint IdentityIQ, Microsoft Identity Manager, Liberman Red Identity Manager, Azure and Microsoft B2B solution
- Experience designing or operating enterprise secrets-management solutions such as HashiCorp Vault, AWS Secrets Manager, or Azure Key Vault
- Experience managing non-human identities and credentials, including service accounts, service principals, API keys, tokens, certificates, and application secrets
- Knowledge of workload identity, federation, short-lived credentials, automated secret discovery and rotation, and secure CI/CD and cloud integrations
- Ability to define and implement secrets-management governance
- Experience with mobile device authentication and management
- Scripting skills such as PowerShell, Perl, or VB Script
- Ability to work effectively with global teams and manage multiple priorities
- One or more certifications including CISM, CompTIA Security+, CISSP, or GIAC
- Ability to fulfill after-hours responsibilities and travel up to 15%
Benefits:
- A comprehensive employee benefits package, including a Retirement and Savings Plan with generous company contributions
- Group medical, dental and vision coverage
- Life and disability insurance
- Flexible spending accounts
- A discretionary annual bonus program
- Stock-based long-term incentives
- Award-winning time-off plans
- Flexible work models where possible
- Career development opportunities
- Work/life balance support
- Financial plans with opportunities to save towards retirement or other goals
















