Principal IS Architect

This is a fully remote position, open to applicants in United States.

📋 Description

• Oversee the design, integration, and support of Amgen’s identity provisioning and entitlement management framework.

• Offer technical and governance supervision for Identity Management initiatives.

• Act as the technical architect for the analysis, design, and execution of Identity Management projects.

• Direct the architecture and integration of enterprise secrets management and non-human identity functionalities.

• Create patterns for service accounts, application identities, API keys, tokens, certificates, and secrets across cloud, data, and enterprise platforms.

• Collaborate with platform and application teams to deploy solutions that adhere to Amgen's security standards while integrating with enterprise IAM.

• Provide leadership and manage day-to-day operations.

• Diagnose and handle critical issues.

• Lead disaster recovery drills and devise ongoing process improvements.

• Organize and oversee budgets related to staff and organizational functions/services.

• Manage and apply Cybersecurity & Digital Trust technologies and processes.

• Create business cases and presentations on information security technologies.

• Counsel project teams, application owners, and Information Security teams on security controls.

• Assist with incident response and conduct mock security incident drills.

• Execute security design consultations and take part in security architecture evaluations.

• Provide mentorship and training to Cybersecurity & Digital Trust and Amgen teams.

• Engage in departmental legal, regulatory, and contractual compliance activities.

⛳️ Requirements

• Doctorate degree with 2 years of experience in Information Systems and/or Computer Science, OR a Master's degree with 4 years, OR a Bachelor's degree with 6 years, OR an Associate’s degree with 10 years, OR a high school diploma/GED with 12 years.

• Familiarity with Web Access Management and SSO technologies, including Entra ID, Okta, Azure, Ping Federate, SAML, OAuth, and OpenID/Connect.

• Proficiency in Microsoft Active Directory, including AD LDS and Azure AD.

• Understanding of LDAP directories and PKI.

• Experience with Amazon AWS and/or Microsoft Azure, as well as Identity and Access Management.

• Working knowledge of networking concepts and protocols, including LAN, WAN, SSL, Firewall, Load Balancer, and DMZ configurations.

• Knowledge of Identity and Access and Role Management applications, such as IBM ISIM, IBM IGI, SailPoint IdentityIQ, Microsoft Identity Manager, Liberman Red Identity Manager, Azure, and Microsoft B2B solutions.

• Experience in designing or operating enterprise secrets-management solutions like HashiCorp Vault, AWS Secrets Manager, or Azure Key Vault.

• Experience managing non-human identities and credentials, including service accounts, service principals, API keys, tokens, certificates, and application secrets.

• Knowledge of workload identity, federation, short-lived credentials, automated secret discovery and rotation, and secure CI/CD and cloud integrations.

• Ability to define and implement governance for secrets management.

• Experience with mobile device authentication and management.

• Scripting skills in languages such as PowerShell, Perl, or VB Script.

• Capacity to work effectively with global teams and manage multiple priorities.

• One or more relevant certifications, including CISM, CompTIA Security+, CISSP, or GIAC.

• Willingness to fulfill after-hours responsibilities and travel up to 15%.

🏝️ Benefits

• A comprehensive employee benefits package, which includes a Retirement and Savings Plan with generous company contributions.

• Group medical, dental, and vision coverage.

• Life and disability insurance.

• Flexible spending accounts.

• A discretionary annual bonus program.

• Stock-based long-term incentives.

• Award-winning time-off plans.

• Flexible work models where feasible.

• Opportunities for career development.

• Support for work/life balance.

• Financial plans that provide opportunities to save toward retirement or other goals.