Sr Staff IT Architect, Identity & Access Management jobs in United States
cer-icon
Apply on Employer Site
company-logo

Jobs via Dice ยท 1 day ago

Sr Staff IT Architect, Identity & Access Management

Thermo Fisher Scientific is seeking a Senior Staff IT Architect to lead the Federation Services pillar within their Identity and Access Management (IAM) team. In this role, you will drive strategy, design, and governance for enterprise Single Sign-On (SSO) to enhance secure access for employees and applications.

Computer Software

Responsibilities

Provide strategic leadership for the design, implementation, and governance of the Federation Services pillar within IAM
Develop and maintain a comprehensive roadmap aligned with organizational priorities and industry best practices
Effectively communicate and demonstrate the value of IAM and Federation services to stakeholders at all levels of the organization
Develop and track metrics that demonstrate the health, stability, and business value of the Federation service
Ensure service availability and compliance with security and regulatory requirements
Ensure IAM solutions meet business security and regulatory requirements
Drive engineering efforts for IAM integrations across enterprise platforms
Collaborate with vendors and evaluate technologies to strengthen Federation services
Partner with cross-functional teams to design and maintain efficient, scalable programs

Qualification

Enterprise SSO technologiesIdentity solutionsActive DirectoryUser provisioning (SCIM)Scripting (PowerShell)Application deployment best practicesTroubleshooting skillsServiceNow automationAI-powered development toolsCommunication skillsCollaboration skills

Required

Provide strategic leadership for the design, implementation, and governance of the Federation Services pillar within IAM
Develop and maintain a comprehensive roadmap aligned with organizational priorities and industry best practices
Effectively communicate and demonstrate the value of IAM and Federation services to stakeholders at all levels of the organization
Develop and track metrics that demonstrate the health, stability, and business value of the Federation service
Ensure service availability and compliance with security and regulatory requirements
Ensure IAM solutions meet business security and regulatory requirements
Drive engineering efforts for IAM integrations across enterprise platforms
Collaborate with vendors and evaluate technologies to strengthen Federation services
Partner with cross-functional teams to design and maintain efficient, scalable programs

Preferred

Bachelor's degree in computer science, Information Systems, or related field (or equivalent experience)
Expertise in enterprise SSO technologies (SAML 2.0, OpenID Connect, etc.) and identity solutions like Entra ID
Familiarity with user provisioning (SCIM), Active Directory, and application authorization models
Confidence in managing an Entra ID Conditional Access chain of moderate complexity, including documenting, requesting, testing, and performing changes to the chain as IT security requirements evolve
Knowledge of application deployment best practices, including hosting, DNS, SSL, and session cookies
Experience deploying SaaS and on-premise applications
Strong troubleshooting skills for web applications and SSO issues
Proficiency with scripting (PowerShell) and exposure to software development
Knowledge of ServiceNow automation and change management processes
Experience with AI-powered development tools (e.g., GitHub Copilot)
Excellent communication and collaboration skills

Benefits

A choice of national medical and dental plans, and a national vision plan, including health incentive programs
Employee assistance and family support programs, including commuter benefits and tuition reimbursement
At least 120 hours paid time off (PTO), 10 paid holidays annually, paid parental leave (3 weeks for bonding and 8 weeks for caregiver leave), accident and life insurance, and short- and long-term disability in accordance with company policy
Retirement and savings programs, such as our competitive 401(k) U.S. retirement savings plan
Employees' Stock Purchase Plan (ESPP) offers eligible colleagues the opportunity to purchase company stock at a discount

Company

Jobs via Dice

twitter
company-logo
Welcome to Jobs via Dice, the go-to destination for discovering the tech jobs you want.

Funding

Current Stage
Early Stage
Company data provided by crunchbase