IAM Architect: Zero Trust & Enterprise Identity Strategy

Boston Scientific; Arden Hills (MN); Hybrid; USD 85,000 - 162,000; Full time

Job summary

Boston Scientific seeks a Cybersecurity Identity & Access Management Architect to lead strategy, architecture and evolution of enterprise identity security across a global medical device organization. You will define and mature IGA, PAM, SSO, MFA, federation, PKI and non-human identities while guiding cross-functional teams.

You will drive Zero Trust initiatives, align IAM with regulatory requirements (NIST, ISO 27001, GDPR) and partner with Cybersecurity, Infrastructure, Cloud, Manufacturing

Qualifications

• Bachelor's degree in cybersecurity, computer science, information technology, engineering or a related field, or equivalent practical experience.
• Minimum of 7 years’ experience in cybersecurity, identity, engineering or security architecture.
• Minimum of seven years’ experience designing, implementing or governing enterprise IAM capabilities.
• Experience leading architecture workstreams, advising cross-functional teams and translating complex security requirements into practical, scalable solutions.
• Experience working in a highly regulated industry, such as medical devices, health care, life sciences, pharmaceuticals or manufacturing.
• Deep knowledge of identity governance, identity lifecycle management, access certification, RBAC, ABAC, segregation of duties and privileged access controls.
• Expertise in SAML, OAuth 2.0, OpenID Connect, SSO, MFA, adaptive access, Zero Trust, and secure cloud and hybrid identity architecture patterns.
• Experience with secrets management, service and machine identities, PKI, certificate lifecycle management, cryptographic key management, AD and Entra ID.

Responsibilities

• Define and drive the enterprise IAM strategy, architecture, standards, governance and multiyear roadmap.
• Design and guide scalable enterprise capabilities for IGA, PAM, SSO, MFA, federation, secrets management, PKI, directory services, cloud identity and non-human identities.
• Lead architecture reviews, modernization initiatives, design workshops and complex cross-functional workstreams.
• Lead identity threat modeling, risk assessments, maturity reviews and gap analyses, and develop prioritized remediation roadmaps.
• Align identity controls with cybersecurity, privacy and regulatory frameworks including NIST, ISO/IEC 27001, GDPR, FDA guidance, SOX.
• Partner with Audit, Privacy, Regulatory Affairs, Quality, GRC, and technology teams on control design, audit readiness and remediation.
• Define IAM risk metrics, KPIs and OKRs, and communicate findings to leadership.
• Evaluate emerging identity technologies and recommend solutions that advance enterprise security and business goals.
• Mentor architects, engineers, analysts and product teams on secure-by-design practices.
• Embed identity security into enterprise technology strategies with multiple business functions.

Skills

IAM architecture

Threat modeling

Cross-functional leadership

Regulatory know-how

Zero Trust

KPI/OKR

Education

Bachelor's degree in cybersecurity

Tools

Saviynt

SailPoint

CyberArk

Delinea

Okta

Entra ID

Active Directory

AWS

Azure

HashiCorp Vault

Job description

Boston Scientific seeks a Cybersecurity Identity & Access Management Architect to lead strategy, architecture and evolution of enterprise identity security across a global medical device organization. You will define and mature IGA, PAM, SSO, MFA, federation, PKI and non-human identities while guiding cross-functional teams.

You will drive Zero Trust initiatives, align IAM with regulatory requirements (NIST, ISO 27001, GDPR) and partner with Cybersecurity, Infrastructure, Cloud, Manufacturing