Principal IS Architect (Identity and Access Management)

Location: United States - Remote; after-hours responsibilities may apply, with travel up to 15%.

Salary: $144,423.50–$195,396.50 annual

Company

hirify.global is a biotechnology company developing, manufacturing, and delivering medicines for serious illnesses.

What you will do

• Lead the architecture, integration, and support of identity provisioning, entitlement management, enterprise directories, authentication, and access governance solutions.
• Design enterprise secrets-management and non-human identity capabilities covering service accounts, application identities, API keys, tokens, certificates, and other secrets.
• Provide technical and governance oversight for Identity Management projects, security architecture reviews, and solution delivery.
• Manage operational issues, critical incidents, disaster recovery exercises, continuous improvement, budgets, and capability integration.
• Advise project teams, application owners, and Information Security teams on security controls and participate in incident response exercises.
• Mentor and train Cybersecurity & Digital Trust and hirify.global teams.

Requirements

• Degree and Information Systems and/or Computer Science experience: doctorate with 2 years, master’s with 4 years, bachelor’s with 6 years, associate’s with 10 years, or high school diploma/GED with 12 years.
• Experience with identity and access management, web access management, SSO, authentication, Active Directory, LDAP, and PKI.
• Experience with AWS and/or Azure, networking concepts, security controls, and enterprise identity platforms.
• Experience designing or operating secrets-management solutions and managing service accounts, service principals, API keys, tokens, certificates, and application secrets.
• Knowledge of workload identity, federation, short-lived credentials, secret discovery and rotation, CI/CD integrations, and secrets-management governance.
• Ability to work with global teams, manage multiple priorities, and support critical security operations.

Nice to have

• Experience with Entra ID, Okta, Azure, Ping Federate, SAML, OAuth, OpenID Connect, SailPoint, IBM identity platforms, or Microsoft Identity Manager.
• Mobile device authentication and management experience.
• Scripting skills in PowerShell, Perl, VBScript, or similar tools.
• CISM, Security+, CISSP, or GIAC certification.
• Military experience.

Culture & Benefits

• Collaborative, innovative, science-based work environment.
• Health, dental, vision, life, disability, and flexible spending benefits for eligible employees and dependents.
• Retirement and savings plan with company contributions.
• Discretionary annual bonus and stock-based long-term incentives.
• Paid time off and career development opportunities.

Hiring process

• Applications remain open until a sufficient number of applications are received or a candidate is selected.
• Sponsorship for this role is not guaranteed.