Associate Director, Identity & Access Architect (Hybrid)

Alnylam Pharmaceuticals Inc.; Cambridge (MA); Hybrid; USD 177,000 - 239,000; Full time

Job summary

Alnylam Pharmaceuticals Inc. seeks an Associate Director, Identity & Access Management Architect to lead the enterprise IAM architecture, governance, and engineering.

You will own IGA, PAM, and hybrid identity, partnering across IT to design, modernize, and operate resilient identity capabilities in a Cambridge-based hybrid role with travel. The role requires 8+ years in IAM with architectural responsibility, deep AD/Entra ID expertise, and experience with SailPoint, BeyondTrust or CyberArk.

Qualifications

• Bachelor’s degree in computer science or related field or equivalent experience.
• 8+ years in IAM/identity engineering with 5+ years in architecture or technical delivery.
• Experience across IGA, PAM, Active Directory, Entra ID, and hybrid/cloud identity.
• Deep AD/Entra ID expertise including authentication, CA, security hardening.

Responsibilities

• Define and own enterprise IAM target architecture and standards.
• Lead design and engineering from concept to implementation and handoff.
• Oversee AD, Entra ID, and hybrid identity governance and security.
• Architect and rollout identity lifecycle, provisioning, and access reviews.
• Set PAM architecture for privileged access and rotation.
• Define access management standards: SSO, MFA, CA, and passwordless.
• Collaborate with Cybersecurity, Cloud, and EA to embed Zero Trust.

Skills

IAM architecture

Active Directory

Entra ID

SailPoint

Automation scripting

Education

Bachelor's degree in CS/related

Tools

BeyondTrust

CyberArk

SailPoint

Microsoft Graph

Job description

Alnylam Pharmaceuticals Inc. seeks an Associate Director, Identity & Access Management Architect to lead the enterprise IAM architecture, governance, and engineering.

You will own IGA, PAM, and hybrid identity, partnering across IT to design, modernize, and operate resilient identity capabilities in a Cambridge-based hybrid role with travel. The role requires 8+ years in IAM with architectural responsibility, deep AD/Entra ID expertise, and experience with SailPoint, BeyondTrust or CyberArk.