Principal IS Architect

BioSpace; Washington (District of Columbia); On-site; USD 170,000 - 210,000; Full time

Job summary

Amgen is seeking a Principal Information Systems (IS) Architect to lead the design, integration, and support of Amgen’s identity provisioning and entitlement management environment. The role focuses on enterprise IAM, SSO tools, and PKI, reporting to the Sr. Director Information Security in Tampa, FL.

Responsibilities include governance, architecture delivery, and collaboration with global teams. Travel up to 15% may be required; strong technical leadership is essential.

Qualifications

• Doctorate or equivalent in IS/CS required or preferred with multiple years of related experience.
• Advanced knowledge of identity management, access governance, and authentication platforms.
• Experience with enterprise IAM, SSO, PKI, and privileged identity management.
• Experience designing or operating secrets-management solutions in cloud and enterprise environments.
• Willingness to travel up to 15% and collaborate with global teams.

Responsibilities

• Provide governance oversight to Identity Management projects and ensure secure delivery.
• Lead integration of secrets-management across cloud and on‑premise platforms.
• Manage operations, incident response, and disaster recovery planning.
• Develop business cases and present security tech proposals to stakeholders.
• Mentor teams on cybersecurity, IAM, and identity governance.

Skills

IdM architecture

SSO (Single Sign-On)

Cloud platforms (AWS/Azure)

Networking concepts

Scripting (PowerShell)

Education

Doctorate degree in Information Systems/CS

Masters in Information Systems/CS

Bachelors in Information Systems/CS

Associates in Information Systems/CS

High school diploma with 12 years in IS/CS

Tools

HashiCorp Vault

Azure Key Vault

Job description

Join Amgens Mission of Serving Patients At Amgen, if you feel like youre part of something bigger, its because you are. Our shared missionto serve patients living with serious illnessesdrives all that we do. Since 1980, weve helped pioneer the world of biotech in our fight against the worlds toughest diseases. Amgen is advancing a broad and deep pipeline and portfolio of medicines to treat heart disease, obesity and obesity-related conditions, rare diseases, inflammatory conditions and cancer. As a member of the Amgen team, youll help make a lasting impact on the lives of patients as we research, manufacture, and deliver innovative medicines to help people live longer, fuller happier lives. Our award-winning culture is collaborative, innovative, and science based. If you have a passion for challenges and the opportunities that lay within them, youll thrive as part of the Amgen team. Join us and transform the lives of patients while transforming your career.

Principal IS Architect

Amgen is seeking a Principal Information Systems (IS) Architect to join Amgens Digital Identity and Access Services team and will lead the design, integration, and support of Amgens identity provisioning and entitlement management environment, as well as related identity-based technologies (e.g. password synchronization, identity attribute management, single sign on, multi-factor authentication, group automation, etc.). The Principal IS Architect will report to the Sr. Director Information Security based out of Amgens Capability Center in Tampa, FL. At Amgen, our mission is simple: to serve patients. The Tampa Capability Center provides essential services that enable us to better pursue this mission. This state-of-the-art center serves as a base for finance, information systems, and human resources professionals to make a meaningful impact at one of the worlds leading biotechnology companies. Identity Management at Amgen is a core group responsible for handling all the enterprise directories, identity provisioning and access management/ governance solutions, single sign-on tools, privileged identity management, PKI and other authentication platforms. This team is at the fore-front of enterprise architecture and security at Amgen and is passionate about providing solutions with great end user experience.

What you will do

Lets do this. Lets change the world. Amgen is seeking a Principal Information Systems (IS) Architect to join Amgens Digital Identity and Access Services team and will lead the design, integration, and support of Amgens identity provisioning and entitlement management environment, as well as related identity-based technologies (e.g. password synchronization, identity attribute management, single sign on, multi-factor authentication, group automation, etc.). The Principal IS Architect will report to the Sr. Director Information Security based out of Amgens Capability Center in Tampa, FL. At Amgen, our mission is simple: to serve patients. Identity Management at Amgen is a core group responsible for handling all the enterprise directories, identity provisioning and access management/ governance solutions, single sign-on tools, privileged identity management, PKI and other authentication platforms. This team is at the fore-front of enterprise architecture and security at Amgen and is passionate about providing solutions with great end user experience.

Responsibilities

• Provide technical and governance oversight to all IdM projects. Serve as the technical architect in the analysis, design and implementation of all IdM related projects and be responsible for their successful delivery while meeting the overall security and integrity of the solution. There is also a need to work with project teams to provide insights about architectural standards and information security standard methodologies.
• Lead the architecture and integration of enterprise secrets-management and non-human identity capabilities. Establish patterns for managing service accounts, application identities, API keys, tokens, certificates, and other secrets across cloud, data, and enterprise platforms. Partner with platform and application teams to implement solutions that meet Amgen security standards and integrate with enterprise IAM.
• Provide leadership and day to day operational management, participate in troubleshooting sessions, manage and handle critical issues, guide and lead disaster recovery exercises, plan continuous process improvement, coordinate and handle budgets for staff and other org specific functions/services.
• Management and implementation of technologies and processes relating to assigned Cybersecurity & Digital Trust capability including issue identification and resolution, integration with other tools, documentation, gap assessment, gap resolution and continuous improvement of the capability.
• Develop or participate in the development of business cases and presentations on information security technologies of interest to Amgen.
• Advise project teams, application owners, and other Information Security teams on information security controls.
• Support Incident Response on security incidents including chipping into mock security incident exercises.
• Perform security design consulting in support of projects including participation in security architecture reviews as necessary.
• Provide mentorship and training on areas of expertise to Cybersecurity & Digital Trust and Amgen teams.
• Participate in departmental compliance (legal, regulatory, and contractual) as needed.
• This position requires after hours responsibilities and may require travel up to 15%.

Basic Qualifications

• Doctorate degree and 2 years of Information Systems and/or Computer Science experience
• Masters degree and 4 years of Information Systems and/or Computer Science experience
• Bachelors degree and 6 years of Information Systems and/or Computer Science experience
• Associates degree and 10 years of Information Systems and/or Computer Science experience
• High school diploma / GED and 12 years of Information Systems and/or Computer Science experience

Preferred Qualifications

• Knowledge of Web Access Management and SSO technologies (Entra ID, Okta, Azure, Ping Federate, SAML, OAuth, and OpenID/Connect).
• Knowledge of Microsoft Active Directory skills including AD LDS and Azure AD.
• Knowledge of LDAP directories, PKI (Public Key Infrastructure).
• Comprehensive experience with Amazon AWS and/or Microsoft Azure as well as understanding of Identity and Access Management.
• Working knowledge of networking concepts and protocols, LAN, WAN, SSL, Firewall, Load Balancer, and DMZ configurations.
• Knowledge of Identity and Access and Role Management applications (IBM ISIM, IBM IGI, Sailpoint IdentityIIQ, Microsoft Identity Manager, Liberman Red Identity Manager, Azure and Microsoft B2B solution).
• Experience designing or operating enterprise secrets-management solutions, such as HashiCorp Vault or cloud-native services such as AWS Secrets Manager and Azure Key Vault.
• Experience managing non-human identities and credentials, including service accounts, service principals, API keys, tokens, certificates, and secrets used by applications and automation.
• Knowledge of workload identity, federation, short-lived credentials, automated secret discovery and rotation, and secure integration with CI/CD pipelines and cloud platforms.
• Ability to define and implement secrets-management governance, including ownership, access controls, auditability, rotation, expiration, and incident response.
• Experience with mobile device authentication and management.
• Scripting skills such as PowerShell, Perl, VB Script, etc.
• Effective working with global teams.
• Successful management of multiple priorities.
• Collaborative, placing priority on the successful completion of team goals.
• Military experience.

One or more of the following certifications, including but not limited to:

• Certified Information Security Manager (CISM)
• CompTIA Security+
• Certified Information Systems Security Professional (CISSP)