Principal IS Architect

Amgen; United States; Remote; USD 144,000 - 195,000; Full time

Benefits offered by this job

Retirement and Savings Plan

Stock-based long-term incentives

Flexible work models

Bonus program

Job summary

Amgen in Tampa's Global Capability Center seeks a Principal IS Architect to lead identity provisioning, MFA, SSO, and secret management across cloud and on-premise platforms. You'll design and govern IAM solutions, align with security standards, and mentor teams.

Responsibilities span architecture, integration, incident response readiness, and collaboration with global stakeholders. A strong background in IdM tech, cloud (AWS/Azure), and governance is essential. Travel up to 15% may be required.

Qualifications

• Doctorate or Master’s or Bachelor’s with 6+ years of IS/CS experience (or equivalent)
• Experience with IdM technologies including SSO and directory services
• Experience designing/operating enterprise secrets-management solutions

Responsibilities

• Provide architecture and governance for IdM projects
• Lead design, integration, and delivery of IAM solutions
• Mentor teams and support security incident responses
• Collaborate with global stakeholders on IAM standards
• Travel up to 15% as needed

Skills

SSO technologies

Active Directory

LDAP directories

AWS/Azure

Networking concepts

Identity management applications

Secrets-management governance

CI/CD integration

PowerShell scripting

Global collaboration

Education

Bachelor’s degree in Information Systems/Computer Science

Master’s degree in Information Systems/Computer Science

Doctorate in Information Systems/Computer Science

Associate’s degree with 10 years of experience

Tools

HashiCorp Vault

AWS Secrets Manager

Azure Key Vault

Job description

Career Category Information Systems Job Description

Join Amgen’s Mission of Serving Patients At Amgen, if you feel like you’re part of something bigger, it’s because you are. Our shared mission—to serve patients living with serious illnesses—drives all that we do. Since 1980, we’ve helped pioneer the world of biotech in our fight against the world’s toughest diseases. Amgen is advancing a broad and deep pipeline and portfolio of medicines to treat heart disease, obesity and obesity-related conditions, rare diseases, inflammatory conditions and cancer. As a member of the Amgen team, you’ll help make a lasting impact on the lives of patients as we research, manufacture, and deliver innovative medicines to help people live longer, fuller happier lives. Our award-winning culture is collaborative, innovative, and science based. If you have a passion for challenges and the opportunities that lay within them, you’ll thrive as part of the Amgen team. Join us and transform the lives of patients while transforming your career.

Principal IS Architect

What you will do Let’s do this. Let’s change the world. Amgen is seeking a Principal Information Systems (IS) Architect to join Amgen’s Digital Identity and Access Services team and will lead the design, integration, and support of Amgen’s identity provisioning and entitlement management environment, as well as related identity-based technologies (e.g. password synchronization, identity attribute management, single sign on, multi-factor authentication, group automation, etc.). The Principal IS Architect will report to the Sr. Director Information Security based out of Amgen’s Capability Center in Tampa, FL. At Amgen, our mission is simple: to serve patients. Our Tampa Capability Center provides essential services that enable us to better pursue this mission. This state-of-the-art center serves as a base for finance, information systems, and human resources professionals to make a meaningful impact at one of the world’s leading biotechnology companies. Identity Management at Amgen is a core group responsible for handling all the enterprise directories, identity provisioning and access management/ governance solutions, single sign-on tools, privileged identity management, PKI and other authentication platforms. This team is at the fore-front of enterprise architecture and security at Amgen and is passionate about providing solutions with great end user experience.

Responsibilities:

• Provide technical and governance oversight to all IdM projects.
• Serve as the technical architect in the analysis, design and implementation of all IdM related projects and be responsible for their successful delivery while meeting the overall security and integrity of the solution.
• There is also a need to work with project teams to provide insights about architectural standards and information security standard methodologies.
• Lead the architecture and integration of enterprise secrets-management and non-human identity capabilities.
• Establish patterns for managing service accounts, application identities, API keys, tokens, certificates, and other secrets across cloud, data, and enterprise platforms.
• Partner with platform and application teams to implement solutions that meet Amgen security standards and integrate with enterprise IAM.
• Provide leadership and day to day operational management, participate in troubleshooting sessions, manage and handle critical issues, guide and lead disaster recovery exercises, plan continuous process improvement, coordinate and handle budgets for staff and other org specific functions/services.
• Management and implementation of technologies and processes relating to assigned Cybersecurity & Digital Trust capability including issue identification and resolution, integration with other tools, documentation, gap assessment, gap resolution and continuous improvement of the capability.
• Develop or participate in the development of business cases and presentations on information security technologies of interest to Amgen.
• Advise project teams, application owners, and other Information Security teams on information security controls.
• Support Incident Response on security incidents including chipping into mock security incident exercises.
• Perform security design consulting in support of projects including participation in security architecture reviews as necessary.
• Provide mentorship and training on areas of expertise to Cybersecurity & Digital Trust and Amgen teams.
• Participate in departmental compliance (legal, regulatory, and contractual) as needed.
• This position requires after hours responsibilities and may require travel up to 15%.

What we expect of you

We are all different, yet we all use our unique contributions to serve patients. The professional we seek is an individual with these qualifications.

Basic Qualifications:

• Doctorate degree and 2 years of Information Systems and/or Computer Science experience OR Master’s degree and 4 years of Information Systems and/or Computer Science experience OR Bachelor’s degree and 6 years of Information Systems and/or Computer Science experience OR Associate’s degree and 10 years of Information Systems and/or Computer Science experience OR High school diploma / GED and 12 years of Information Systems and/or Computer Science experience

Preferred Qualifications:

• Knowledge of Web Access Management and SSO technologies (Entra ID, Okta, Azure, Ping Federate, SAML, OAuth, and OpenID/Connect).
• Knowledge of Microsoft Active Directory skills including AD LDS and Azure AD.
• Knowledge of LDAP directories, PKI (Public Key Infrastructure).
• Comprehensive experience with Amazon AWS and/or Microsoft Azure as well as understanding of Identity and Access Management.
• Working knowledge of networking concepts and protocols, LAN, WAN, SSL, Firewall, Load Balancer, and DMZ configurations.
• Knowledge of Identity and Access and Role Management applications (IBM ISIM, IBM IGI, Sailpoint IdentityIIQ, Microsoft Identity Manager, Liberman Red Identity Manager, Azure and Microsoft B2B solution).
• Experience designing or operating enterprise secrets-management solutions, such as HashiCorp Vault or cloud-native services such as AWS Secrets Manager and Azure Key Vault.
• Experience managing non-human identities and credentials, including service accounts, service principals, API keys, tokens, certificates, and secrets used by applications and automation.
• Knowledge of workload identity, federation, short-lived credentials, automated secret discovery and rotation, and secure integration with CI/CD pipelines and cloud platforms.
• Ability to define and implement secrets-management governance, including ownership, access controls, auditability, rotation, expiration, and incident response.
• Experience with mobile device authentication and management.
• Scripting skills such as PowerShell, Perl, VB Script, etc.
• Effective working with global teams.
• Successful management of multiple priorities.
• Collaborative, placing priority on the successful completion of team goals.
• Military experience.
• One or more of the following certifications, including but not limited to: Certified Information Security Manager (CISM) CompTIA Security+ Certified Information Systems Security Professional (CISSP) SANS Global Information Assurance Certifications (GIAC)

What you can expect of us

From our competitive benefits to our collaborative culture, we’ll support your journey every step of the way.

The expected annual salary range for this role in the U.S. (excluding Puerto Rico) is posted. Actual salary will vary based on several factors including but not limited to, relevant skills, experience, and qualifications. In addition to the base salary, Amgen offers a Total Rewards Plan, based on eligibility, comprising of health and welfare plans for staff and eligible dependents, financial plans with opportunities to save towards retirement or other goals, work/life balance, and career development opportunities that may include:

• A comprehensive employee benefits package, including a Retirement and Savings Plan with generous company contributions, group medical, dental and vision coverage, life and disability insurance, and flexible spending accounts
• A discretionary annual bonus program, or for field sales representatives, a sales-based incentive plan
• Stock-based long-term incentives
• Award-winning time-off plans
• Flexible work models where possible

Refer to the Work Location Type in the job posting to see if this applies.

Sponsorship for this role is not guaranteed.

As an organization dedicated to improving the quality of life for people around the world, Amgen fosters an inclusive environment of ethical, committed and highly accomplished people who respect each other and live the Amgen values to continue advancing science to serve patients. Together, we compete in the fight against serious disease. Amgen is an Equal Opportunity employer. We make all employment decisions without regard to race, color, religion, sex or any other characteristic protected by applicable law. We provide reasonable accommodations to applicants and employees with disabilities, consistent with legal requirements. Please contact us to request accommodation.

Salary Range 144,423.50USD -195,396.50 USD

Amgen is committed to unlocking the potential of biology for patients suffering from serious illnesses by discovering, developing, manufacturing and delivering innovative human therapeutics. This approach begins by using tools like advanced human genetics to unravel the complexities of disease and understand the fundamentals of human biology. Amgen focuses on areas of high unmet medical need and leverages its biologics manufacturing expertise to strive for solutions that improve health outcomes and dramatically improve people's lives. A biotechnology pioneer since 1980, Amgen has grown to be one of the world’s leading independent biotechnology companies, has reached millions of patients around the world and is developing a pipeline of medicines with breakaway potential. For more information, visit www.amgen.com and follow us on www.twitter.com/amgen