Principal IS Architect

Posted 1hrs ago

Employment Information

Education
Salary
Experience
Job Type

Report this job

Job expired or something wrong with this job?

Job Description

Principal IS Architect leading identity, access, and secrets-management architecture. Supporting Amgen’s biotechnology medicines business through secure enterprise systems and governance.

Responsibilities:

  • Lead the design, integration, and support of Amgen’s identity provisioning and entitlement management environment
  • Provide technical and governance oversight for Identity Management projects
  • Serve as technical architect for analysis, design, and implementation of Identity Management projects
  • Lead architecture and integration of enterprise secrets-management and non-human identity capabilities
  • Establish patterns for service accounts, application identities, API keys, tokens, certificates, and secrets across cloud, data, and enterprise platforms
  • Partner with platform and application teams to implement solutions meeting Amgen security standards and integrating with enterprise IAM
  • Provide leadership and day-to-day operational management
  • Troubleshoot and manage critical issues
  • Guide disaster recovery exercises and plan continuous process improvement
  • Coordinate and manage budgets for staff and organizational functions/services
  • Manage and implement Cybersecurity & Digital Trust technologies and processes
  • Develop business cases and presentations on information security technologies
  • Advise project teams, application owners, and Information Security teams on security controls
  • Support incident response and mock security incident exercises
  • Perform security design consulting and participate in security architecture reviews
  • Provide mentorship and training to Cybersecurity & Digital Trust and Amgen teams
  • Participate in departmental legal, regulatory, and contractual compliance activities

Requirements:

  • Doctorate degree and 2 years of Information Systems and/or Computer Science experience, OR Master’s degree and 4 years, OR Bachelor’s degree and 6 years, OR Associate’s degree and 10 years, OR high school diploma/GED and 12 years
  • Knowledge of Web Access Management and SSO technologies, including Entra ID, Okta, Azure, Ping Federate, SAML, OAuth, and OpenID/Connect
  • Microsoft Active Directory skills, including AD LDS and Azure AD
  • Knowledge of LDAP directories and PKI
  • Experience with Amazon AWS and/or Microsoft Azure and Identity and Access Management
  • Working knowledge of networking concepts and protocols, LAN, WAN, SSL, Firewall, Load Balancer, and DMZ configurations
  • Knowledge of Identity and Access and Role Management applications, including IBM ISIM, IBM IGI, SailPoint IdentityIQ, Microsoft Identity Manager, Liberman Red Identity Manager, Azure and Microsoft B2B solution
  • Experience designing or operating enterprise secrets-management solutions such as HashiCorp Vault, AWS Secrets Manager, or Azure Key Vault
  • Experience managing non-human identities and credentials, including service accounts, service principals, API keys, tokens, certificates, and application secrets
  • Knowledge of workload identity, federation, short-lived credentials, automated secret discovery and rotation, and secure CI/CD and cloud integrations
  • Ability to define and implement secrets-management governance
  • Experience with mobile device authentication and management
  • Scripting skills such as PowerShell, Perl, or VB Script
  • Ability to work effectively with global teams and manage multiple priorities
  • One or more certifications including CISM, CompTIA Security+, CISSP, or GIAC
  • Ability to fulfill after-hours responsibilities and travel up to 15%

Benefits:

  • A comprehensive employee benefits package, including a Retirement and Savings Plan with generous company contributions
  • Group medical, dental and vision coverage
  • Life and disability insurance
  • Flexible spending accounts
  • A discretionary annual bonus program
  • Stock-based long-term incentives
  • Award-winning time-off plans
  • Flexible work models where possible
  • Career development opportunities
  • Work/life balance support
  • Financial plans with opportunities to save towards retirement or other goals