Security Architect

• Architect, administer, manage, and maintain Amgens identity provisioning environment as well as support other identity related systems used to support authentication and authorization. Align new and existing applications and systems to IAM/RBAC framework
• Provide technical and governance oversight to all IdM projects. Serve as the technical architect in the analysis, design and implementation of all IdM related projects and be responsible for their successful delivery while meeting the overall security and integrity of the solution. Work with project teams to provide insights about architectural standards and information security best practices
• Supervise operational and performance statistics for handled systems to ensure reliability and availability, perform preventative maintenance, and automate routine procedures. Create KPIs to monitor growth statistics and resource forecasts.
• Develop and maintain the identity management architecture to ensure secure and efficient access controls.
• Create and maintain documentation for identity management processes, policies, and system architecture.
• Document incident response and remediation procedures for identity-related issues.
• Design provisioning solutions that align with business requirements and security standards.
• Stay updated on industry trends, tools, and technologies related to identity and access management.
• Evaluate and recommend new solutions and technologies to improve identity management practices.
• This position may have after hours responsibilities

We are all different, yet we all use our unique contributions to serve patients.

Basic Qualifications:

• Masters degree and 4 years of Information Systems experience or related field OR
• Bachelors degree and 6 years of Information Systems experience or related field OR
• Associates degree and 8 years of Information Systems experience or related field

Preferred Qualifications:

Must-Have Skills:

• Experience integrating SailPoint with various applications, both on-premises and cloud-based.
• Solid understanding of identity governance concepts, including role-based access control (RBAC), access certification, and provisioning processes.
• Proficiency in identity management technologies (e.g., Okta, Azure AD, SailPoint).
• Understanding of provisioning protocols (e.g., SCIM, SAML, OAuth, OpenID Connect).
• Experience with APIs and integration techniques to connect identity management systems with various applications and services.
• Knowledge of directory services (e.g., LDAP, Active Directory). Sharp learning agility, problem-solving and analytical thinking.
• Familiarity with security frameworks (e.g., NIST, ISO 27001) and compliance regulations (e.g., GDPR, HIPAA).
• Ability to conduct risk assessments and vulnerability analysis.
• Understanding of user lifecycle management processes, including onboarding, offboarding, and role-based access control.

• Scripting skills such as PowerShell or Python
• Experience with IS Security
• Experience with Agile Methodology
• Proficiency in scripting and automation is a plus

• Microsoft, GCP or AWS Cloud (preferred)
• Identity Provisioning or Security Certification (preferred)
• SailPoint Certification (preferred)

• Excellent analytical and solve skills
• Strong verbal and written communication skills
• Ability to work efficiently with global, virtual teams
• High degree of initiative and self-motivation
• Ability to handle multiple priorities effectively
• Team oriented, with a focus on achieving team goals
• Strong presentation and public speaking skills

• This position requires you to work a later shift and may be assigned a second or third shift schedule. Candidates must be willing and able to work during evening or night shifts, as required
• Potential Shifts (subject to change based on business requirements): Second Shift: 2:00pm 10:00pm IST; Third Shift: 10:00 pm 7:00 am IST.
• On-Call This position may have after hours responsibilities