Manager, Authentication Engineer

Pfizer, S.A. de C.V; India; On-site; INR 1,800,000 - 3,000,000; Full time

Benefits offered by this job

Hybrid work model

Pfizer benefits

Job summary

Pfizer is seeking an experienced Manager of Authentication Engineering to shape authentication strategy across on‑premises, cloud, and hybrid environments in a global setting. You will lead SSO, MFA, passwordless approaches, and identity federation to secure access for thousands of users.

You will partner with Cybersecurity, Infra, Cloud, and App teams to design scalable, secure solutions while ensuring regulatory compliance and strong user experience, in a hybrid work model within Pfizer’s

Qualifications

• Bachelor’s degree in relevant discipline; 4+ years in identity and access management.
• At least 3 years focused on SSO solutions handling 50,000+ users.
• Experience with SAML, OAuth, OpenID Connect and identity federation.
• Knowledge of SOX/GXP and regulatory guidelines; agile experience.

Responsibilities

• Develop and execute an Authentication strategy for secure, user-friendly access.
• Oversee SSO/MFA design, scalability, and integration with cloud apps.
• Collaborate with IT, security, development, and product teams to embed SSO/MFA.
• Maintain security and compliance with GDPR, HIPAA, NIST standards.
• Lead incident management and drive continuous improvements.
• Improve end-user experience by reducing login friction and increasing adoption.
• Define KPIs and report on SSO performance and security metrics.

Skills

SSO technologies

MFA / Passwordless

Identity Federation

Cloud IAM solutions

Okta / Azure AD / Ping Identity

Education

Bachelor's degree in a relevant discipline

Master’s degree (preferred)

Tools

Okta

Azure AD

Ping Identity

Job description

We’re in relentless pursuit of breakthroughs that change patients’ lives. We innovate every day to make the world a healthier place.

To fully realize Pfizer’s purpose – Breakthroughs that change patients’ lives – we have established a clear set of expectations regarding “what” we need to achieve for patients and “how” we will go about achieving those goals.

Pfizer Digital takes immense pride in being at the forefront of innovation, harnessing cutting-edge smart technology that profoundly impacts the lives of our patients.

Pfizer offers competitive compensation and benefits programs designed to meet the diverse needs of our colleagues.

Pfizer’s Identity Security and Access Management (ISAM) organization delivers seamless, secure, modern, and scalable identity solutions for all platforms and identity types. Our mission is to design, implement, and maintain a centralized, modern, and scalable Identity Security and Access Management (ISAM) ecosystem that secures digital assets across all platform and identity types, improves end-user experiences and strengthens our overall security posture, while maintaining compliance with global regulatory requirements. We achieve this mission through a combination of world-class talent, top-tier technologies and industry leading best practices

The Manager, Authentication Engineer is responsible for the strategy, architecture, implementation, and operational management of enterprise authentication services across on-premises, cloud, and hybrid environments. This role oversees authentication platforms, Multi-Factor Authentication (MFA), Single Sign-On (SSO), passwordless authentication, federation, and identity security initiatives. The role partners closely with Cybersecurity, Infrastructure, Cloud Engineering, Application Development, and business stakeholders to deliver secure, scalable, and highly available authentication solutions that improve user experience while reducing organizational risk.

ROLE RESPONSIBILITIES

• Strategy & Leadership:
  Develop and execute a comprehensive Authentication strategy to ensure secure and user-friendly access across all enterprise applications and platforms. Drive SSO adoption and improve the overall identity management ecosystem.
• SSO / MFA Architecture & Design:
  Oversee the design, implementation, and ongoing optimization of the SSO / MFA framework. Ensure it is scalable, resilient, and integrated with both internal and third-party services, including cloud-based applications.
• Cross-Functional Collaboration:
  Work closely with cross-functional teams including IT, security, development, and product teams to ensure seamless integration of SSO & MFA capabilities into new and existing platforms. Provide guidance on best practices for secure access management.
• Security & Compliance:
  Maintain a strong understanding of security protocols and compliance standards (e.g., GDPR, HIPAA, NIST) and ensure that SSO solutions align with relevant regulations and industry standards. Lead the development and implementation of security controls related to authentication and authorization.
• Vendor & Tool Selection:
  Evaluate and select appropriate identity management tools, including SSO solutions, Multi-Factor Authentication (MFA), and Identity Federation. Manage relationships with vendors and third-party providers, ensuring successful product implementation and ongoing support.
• Incident Management & Troubleshooting:
  Lead the team in investigating and resolving any issues related to SSO / MFA functionality. Ensure that incidents are managed efficiently, and improvements are implemented to minimize future disruptions.
• User Experience Focus:
  Ensure that SSO implementation improves the end-user experience by simplifying login processes while maintaining high-security standards. Work on reducing friction points and increasing user adoption.
• Metrics & Reporting:
  Help develop key performance indicators (KPIs) for SSO performance and security metrics. Regularly report on SSO effectiveness, user engagement, security breaches, and other relevant metrics.

BASIC QUALIFICATIONS

• 4+ years of experience in identity and access management, with at least 3 years focused on Single Sign-On (SSO) solutions. Strong background in IT security, authentication protocols, and IAM frameworks supporting SSO with greater than 50,000 users.
• Deep understanding of SSO technologies (e.g., SAML, OAuth, OpenID Connect) and experience with identity federation, multi-factor authentication (MFA), and cloud-based IAM solutions. Knowledge of identity providers like Okta, Azure AD, or Ping Identity.
• Able to solve highly complex authentication and authorization problems within a Global environment.
• Strong understanding of security best practices related to identity management, including encryption, tokenization, and secure protocols.
• Experience in leading IAM system support, engineering, and operations teams within a Global Business Unit.
• Able to manage resources outside of direct reports and across multiple teams.
• Understanding of applicable laws and regulations including Sarbanes-Oxley (SOX) and GXP quality regulations and guidelines.
• Hold team accountable and a proven track record of successfully managing and executing on long term complex projects.
• Demonstrated experience in an agile work environment possessing qualities such as a collaborative mindset, adaptability to change, and a proactive problem-solving approach.

PREFERRED QUALIFICATIONS

• Deep expertise in Ping Identity solutions is highly desirable.

ROLE SUMMARY

Pfizer’s Identity Security and Access Management (ISAM) organization delivers seamless, secure, modern, and scalable identity solutions for all platforms and identity types. Our mission is to design, implement, and maintain a centralized, modern, and scalable Identity Security and Access Management (ISAM) ecosystem that secures digital assets across all platform and identity types, improves end-user experiences and strengthens our overall security posture, while maintaining compliance with global regulatory requirements. We achieve this mission through a combination of world-class talent, top-tier technologies and industry leading best practices

The Manager, Authentication Engineer is responsible for the strategy, architecture, implementation, and operational management of enterprise authentication services across on-premises, cloud, and hybrid environments. This role oversees authentication platforms, Multi-Factor Authentication (MFA), Single Sign-On (SSO), passwordless authentication, federation, and identity security initiatives. The role partners closely with Cybersecurity, Infrastructure, Cloud Engineering, Application Development, and business stakeholders to deliver secure, scalable, and highly available authentication solutions that improve user experience while reducing organizational risk.

ROLE RESPONSIBILITIES

• Strategy & Leadership:
  Develop and execute a comprehensive Authentication strategy to ensure secure and user-friendly access across all enterprise applications and platforms. Drive SSO adoption and improve the overall identity management ecosystem.

• SSO / MFA Architecture & Design:
  Oversee the design, implementation, and ongoing optimization of the SSO / MFA framework. Ensure it is scalable, resilient, and integrated with both internal and third-party services, including cloud-based applications.

• Cross-Functional Collaboration:
  Work closely with cross-functional teams including IT, security, development, and product teams to ensure seamless integration of SSO & MFA capabilities into new and existing platforms. Provide guidance on best practices for secure access management.

• Security & Compliance:
  Maintain a strong understanding of security protocols and compliance standards (e.g., GDPR, HIPAA, NIST) and ensure that SSO solutions align with relevant regulations and industry standards. Lead the development and implementation of security controls related to authentication and authorization.

• Vendor & Tool Selection:
  Evaluate and select appropriate identity management tools, including SSO solutions, Multi-Factor Authentication (MFA), and Identity Federation. Manage relationships with vendors and third-party providers, ensuring successful product implementation and ongoing support.

• Incident Management & Troubleshooting:
  Lead the team in investigating and resolving any issues related to SSO / MFA functionality. Ensure that incidents are managed efficiently, and improvements are implemented to minimize future disruptions.

• User Experience Focus:
  Ensure that SSO implementation improves the end-user experience by simplifying login processes while maintaining high-security standards. Work on reducing friction points and increasing user adoption.

• Metrics & Reporting:
  Help develop key performance indicators (KPIs) for SSO performance and security metrics. Regularly report on SSO effectiveness, user engagement, security breaches, and other relevant metrics.

BASIC QUALIFICATIONS

• Bachelor’s degree in relevant discipline.

• 4+ years of experience in identity and access management, with at least 3 years focused on Single Sign-On (SSO) solutions. Strong background in IT security, authentication protocols, and IAM frameworks supporting SSO with greater than 50,000 users.

• Deep understanding of SSO technologies (e.g., SAML, OAuth, OpenID Connect) and experience with identity federation, multi-factor authentication (MFA), and cloud-based IAM solutions. Knowledge of identity providers like Okta, Azure AD, or Ping Identity.

• Able to solve highly complex authentication and authorization problems within a Global environment.

• Strong understanding of security best practices related to identity management, including encryption, tokenization, and secure protocols.

• Experience in leading IAM system support, engineering, and operations teams within a Global Business Unit.

• Able to manage resources outside of direct reports and across multiple teams.

• Understanding of applicable laws and regulations including Sarbanes-Oxley (SOX) and GXP quality regulations and guidelines.

• Hold team accountable and a proven track record of successfully managing and executing on long term complex projects.

• Demonstrated experience in an agile work environment possessing qualities such as a collaborative mindset, adaptability to change, and a proactive problem-solving approach.

PREFERRED QUALIFICATIONS

• Master’s degree in relevant discipline.

• Deep expertise in Ping Identity solutions is highly desirable.

Work Location Assignment:Hybrid

Pfizer is an equal opportunity employer and complies with all applicable equal employment opportunity legislation in each jurisdiction in which it operates.

To learn more about acceptable and prohibited uses of AI during the recruitment process, please review our candidate AI-use guidelines available on Pfizer Careers.

Information & Business Tech