IAM Architect - User Provisioning & Access Control

Amgen, Inc.; Portugal; Híbrido; EUR 60 000 - 90 000; Tempo integral

Resumo da oferta

A leading biotechnology company in Portugal seeks an IAM Architect specializing in User Provisioning & Access Control. You will design and implement identity governance solutions, focusing on RBAC and ABAC models. Ideal candidates hold a relevant degree and possess deep expertise in IAM architecture and directory services like Active Directory and LDAP. This role allows for flexible work arrangements, contributing to a diverse and inclusive culture.

Serviços

Generous Total Rewards Plan

Flexible work arrangements

Diverse and inclusive community

Qualificações

• Deep expertise in identity provisioning across hybrid environments.
• Experienced in IAM architecture and policy-driven access models.
• Strong communicator with excellent documentation skills.

Responsabilidades

• Design and implement comprehensive identity provisioning workflows.
• Lead the development of RBAC models.
• Automate provisioning tasks using scripting and workflow tools.

Conhecimentos

IAM architecture expertise

RBAC and ABAC knowledge

Directory services proficiency

Scripting skills

Analytical abilities

Formação académica

Relevant degree

Ferramentas

SailPoint

CyberArk

Okta

Microsoft Entra ID

Descrição da oferta de emprego

Information Systems – Job Description

Career Category: Information Systems

HOW MIGHT YOU DEFY IMAGINATION

Join our team at AMGEN Capability Center Portugal. We are a diverse and global organization with a strong presence in Lisbon's city center. We offer opportunities across Cybersecurity, Data & Analytics, Digital, Technology and Innovation, Finance, General & Admin, Human Resources, Regulatory Affairs, and more. AMGEN is committed to serving patients and making a difference in people’s lives.

IAM ARCHITECT – USER PROVISIONING & ACCESS CONTROL

LIVE

WHAT YOU WILL DO

ABOUT THE ROLE

As an IAM Architect - User Provisioning & Access Control at Amgen's Capability Center Portugal (ACCP), you will lead the design and implementation of robust information system architectures that support evolving business needs. You will analyze requirements, craft scalable architectural solutions, evaluate technologies, and ensure alignment with industry standards, governance frameworks, and best practices. You will help build secure and scalable identity governance solutions with a focus on RBAC and ABAC models.

Roles & Responsibilities

• Design and implement comprehensive identity provisioning workflows for users, systems, and applications
• Develop standardized models to support joiner/mover/leaver processes
• Ensure solutions are scalable, secure, and compliant with internal policies and external regulations
• Provide technical and governance oversight across provisioning projects, acting as the lead architect from analysis through delivery
• Lead the development and continuous improvement of RBAC models, including role mining, engineering, and lifecycle management
• Define and manage identity governance policies, including access reviews, certifications, and entitlement management
• Integrate governance frameworks with provisioning and access control mechanisms
• Manage access reviews and certifications, enforce SoD controls, and ensure audit readiness
• Support governance reporting, compliance audits, and risk assessments
• Define response and remediation procedures for identity-related issues
• Collaborate with infrastructure and application teams to integrate IAM tools with enterprise systems
• Automate provisioning and deprovisioning tasks using scripting and workflow tools
• Provide strategic direction and technical leadership in provisioning architecture
• Promote best practices in access control, least privilege, and zero trust principles
• Partner with stakeholders across security, compliance, HR, and IT to align provisioning capabilities with business objectives
• This position may include after-hours and on-call responsibilities

What we expect of you

Our ideal candidate

• Holds a relevant degree and has deep expertise in identity provisioning across hybrid environments
• Experienced in IAM architecture, including RBAC, ABAC, and policy-driven access models
• Proficient in directory services (Active Directory, LDAP) and account reconciliation
• Skilled in IAM tools (e.g. SailPoint, CyberArk, Okta, ForgeRock, Microsoft Entra ID) and protocols (SAML, OAuth, SCIM)
• Familiar with automation scripting (PowerShell, Python) and workflow tools
• Understands compliance frameworks (SOX, GxP) and has experience with audits and risk assessments
• Strong communicator with excellent documentation and stakeholder management skills
• Holds relevant certifications (e.g. CIAM, CISSP) and has exposure to CIEM, PAM, or IGA platforms
• Experienced in cloud-based access governance (AWS, Azure, GCP)
• Demonstrates strong analytical, troubleshooting, and problem-solving abilities
• Available for rotational on-call duties during evenings and weekends

WHAT YOU CAN EXPECT OF US

• Vast opportunities to learn, develop, and move up and across our global organization.

• Diverse and inclusive community of belonging, where colleagues are empowered to bring ideas to the table, take risks, and act.

• Generous Amgen Total Rewards Plan comprising healthcare, finance, wealth and career benefits.

• Flexible work arrangements.

APPLY

APPLY NOW FOR A CAREER THAT DEFIES IMAGINATION. In our quest to serve patients above all else, Amgen is the first to imagine, and the last to doubt. Join us at careers.amgen.com.

EQUAL OPPORTUNITY STATEMENT

Amgen is an Equal Opportunity employer and will consider you without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, or disability status. We will ensure that individuals with disabilities are provided a reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request an accommodation.