Associate Director, Identity & Access Management Architect

Alnylam Pharmaceuticals; Cambridge (MA); Hybrid; USD 160,000 - 210,000; Full time

Job summary

Alnylam Pharmaceuticals in Cambridge, MA seeks an Associate Director, Identity & Access Management Architect to own IAM architecture, governance and engineering across IGA, PAM, authentication, and cloud identity for people, applications and technology.

You will lead AD, Entra ID and hybrid identity initiatives, define secure patterns, and partner with Cybersecurity, Infrastructure, Applications, Data and AI teams to implement Zero Trust principles in a regulated environment.

Qualifications

• 8+ years of progressive experience in IAM, identity engineering, Directory Services, or related technology disciplines, including 5+ years in architecture, engineering, or technical delivery roles with responsibility for complex identity solutions.
• Experience delivering enterprise IAM solutions across IGA, PAM, access management, AD, Entra ID, and hybrid/cloud identity.
• Experience with SailPoint and BeyondTrust or CyberArk, and with SAML, OAuth 2.0, OIDC, SCIM, Kerberos, LDAP/LDAPS, REST APIs, and certificates.
• Strong familiarity with cybersecurity frameworks and standards (e.g., NIST CSF, NIST 800-53, Zero Trust).
• Excellent communication skills translating complex technical concepts into business impact.

Responsibilities

• Define and own the enterprise IAM target architecture, standards and roadmaps across IGA, PAM, access management, and cloud identity.
• Lead design and engineering execution from architecture to implementation, testing and operational handoff.
• Own technical direction of AD, Entra ID and hybrid identity including synchronization and authentication.
• Drive directory modernization, security hardening, and complex migration or incident support.
• Architect and rollout identity lifecycle governance, including joiner/mover/leaver, automated provisioning, role models, access reviews, and onboarding via SailPoint.
• Define PAM architecture for vaulting, rotation, session controls, just-in-time access, emergency access, and integrations.
• Establish access management standards for SSO, MFA, passwordless authentication, federation, and Conditional Access.
• Define secure patterns for cloud workloads, service accounts, secrets, certificates, APIs, and AI agents.
• Partner with Cybersecurity, Infrastructure, Cloud, Applications, Data/AI, and EA to address identity risk and embed Zero Trust.
• Drive automation, mentor IAM engineers, and serve as technical escalation point for identity issues.

Skills

Leadership

Strategic thinking

Communication

Stakeholder influence

Mentoring IAM engineers

Education

Bachelor's degree in CS/Engineering/Cybersecurity

Tools

Active Directory

Entra ID

SailPoint

BeyondTrust

CyberArk

SAML

OAuth 2.0

OIDC

SCIM

Kerberos

LDAP/LDAPS

Job description

Associate Director, Identity & Access Management Architect

Cambridge, MA

Overview:

Alnylam is seeking an Associate Director, Identity & Access Management Architect to lead the architecture, engineering, and delivery of identity services across the enterprise. The role brings together identity governance and admiration (IGA), privileged access management (PAM), authentication, directory services, cloud identity, and non-human identities to support secure access for our people, applications, and technology.

Reporting to the Senior Director, Head of Identity and Access Management, this leader will own IAM architecture and engineering and provide technical ownership of IGA, PAM, Active Directory, Microsoft Entra ID, and hybrid identity. The role combines strategic direction with hands-on technical execution, working with engineering, infrastructure and business teams to design, modernize, troubleshoot, and operate resilient identity capabilities.

This is a hybrid role primarily based in Cambridge, MA, with up to 25% local and international travel.

Key Responsibilities:

• Define and own the enterprise IAM target architecture, technical standards, integration patterns, roadmap across IGA, PAM, access management, directory services, cloud, and non-human identity.
• Lead identity solution design and engineering execution from architecture review and proof of concept through implementation, testing, operational handoff, and ongoing improvement.
• Own the technical direction of Active Directory, Entra ID, and hybrid identity, including tenant and directory architecture, synchronization, authentication, groups, privileged administration, and service resilience.
• Drive directory modernization and security, including legacy authentication reduction, Tier 0 protection, hardening, recovery, and complex migration or incident support.
• Architect, design, implement and rollout identity lifecycle and governance capabilities, including joiner, mover, and leaver processes; automated provisioning; birthright access; role models; access reviews; and application onboarding through SailPoint and related integrations.
• Define PAM architecture for privileged account discovery, credential vaulting and rotation, session controls, just-in-time access, emergency access, and integration with directory and governance platforms.
• Establish access management standards for SSO, MFA, phishing-resistant and passwordless authentication, federation, and Conditional Access using appropriate modern protocols.
• Define secure identity patterns for cloud workloads, service accounts, service principals, secrets, certificates, APIs, and AI agents, including ownership, least privilege, and lifecycle controls.
• Partner with Cybersecurity, Infrastructure, Cloud, Applications, Data and AI, and Enterprise Architecture to address identity risk, strengthen detection and response, and embed Zero Trust principles.
• Drive automation and reusable engineering practices; mentor IAM and directory engineers and serve as a technical escalation point for complex identity issues.

Qualifications:

• Bachelor’s degree in computer science, cybersecurity, engineering, or a related field, or equivalent experience.
• 8+ years of progressive experience in IAM, identity engineering, Directory Services, or related technology disciplines, including 5+ years in architecture, engineering, or technical delivery roles with demonstrated responsibility for designing and implementing complex identity solutions.
• Experience delivering enterprise IAM solutions across IGA, PAM, access management, Active Directory, Entra ID, and hybrid or cloud identity.
• Deep hands-on AD and Entra ID expertise, including directory architecture, synchronization, authentication, Conditional Access, privileged roles, security hardening, and troubleshooting.
• Experience with SailPoint and BeyondTrust or CyberArk, and with SAML, OAuth 2.0, OIDC, SCIM, Kerberos, LDAP/LDAPS, REST APIs, and certificates.
• Proven ability to turn architecture into working solutions, lead technical reviews, guide engineers, and communicate decisions to business and technology leaders.
• Experience in a regulated environment and certifications such as CISSP, Microsoft identity, SailPoint, BeyondTrust, or CyberArk are preferred.
• Strong familiarity with cybersecurity frameworks and standards (e.g., NIST CSF, NIST 800-53, Zero Trust Architecture concepts).
• Demonstrated ability to influence senior stakeholders and drive the adoption of modernized IAM concepts, processes and technology decisions across complex, regulated environments.
• Excellent communication skills, translating complex technical concepts into clear business impact.

About Alnylam

We are the leader in RNAi therapeutics– a revolutionaryapproach with the potential to transform the lives of people with rare and common diseases. Built on Nobel Prize-winning science, Alnylam has delivered the breakthroughs that made RNAi therapeutics possibleand are just at the beginning of what’s possible. Our deep pipeline, late-stage programs, and bold vision reflect our core values: fierce innovation, passion for excellence, purposeful urgency, open culture and commitment to people. We're proud to be a globally recognized top employer, wherean authentic, inclusive culture and breakthrough thinkingfuel one another.

At Alnylam, we commit to an inclusive recruitment process and equal employment opportunity. Qualified applicants will receive consideration for employment without regard to their sex, gender or gender identity, sexual orientation, race, color, ethnicity, national origin, ancestry, citizenship, religion, creed, physical or mental disability, pregnancy status or related conditions, genetic information, veteran or military status, marital or familial status, political affiliation, age, or any other factor protected by federal, state, or local law. Alnylam is an E-Verify Employer.

Before applying, please review Alnylam's Candidate Privacy Notice regarding how Alnylam handles Personal Data you provide with your application for employment.

The pay range below reflects the full-time base salary range we expect to pay for this role at the time of posting. Base pay will be determined based on a number of factors including, but not limited to, relevant experience, skills, and education. This role is eligible for an annual short-term incentive award (e.g., bonus or sales incentive) and an annual long-term incentive award (e.g., equity).

Alnylam’s robust Total Rewards package is designed to support your overall health and well-being. We offer comprehensive benefits including medical, dental, and vision coverage, life and disability insurance, a lifestyle reimbursement program, flexible spending and health savings accounts and a 401(k)with a generous company match. Eligible employees enjoy paid time off, wellness days, holidays, and two company-wide recharge breaks. We also offer generous family resources and leave. Our commitment to your well-being reflects our belief that caring for our people fuels the impact we create together.