Senior Cybersecurity Architect/Engineer

BioNJ Inc.; Bridgewater (MA); On-site; USD 150,000 - 190,000; Full time

Job summary

Legend Biotech is seeking a Senior Cybersecurity Architect/Engineer to lead the Zero Trust security strategy within the Information Technology team. Based in Bridgewater, NJ or Somerset, NJ, you will drive secure, modern architectures across users, devices, apps, networks, data and cloud environments.

Ideal candidates bring hands-on ZIA/ZPA experience, strong identity and cloud security expertise, and a proven record of enterprise security transformation in regulated settings.

Qualifications

• Bachelor's degree in cybersecurity, IT, CS, engineering or related field; master's preferred.
• Industry certifications such as CISSP, CCSP, SC-100, SC-200 or equivalent.
• Hands-on experience with ZIA, ZPA and Zero Trust architectures.

Responsibilities

• Lead design and governance of enterprise Zero Trust architecture across cloud, on‑prem and hybrid environments.
• Develop security reference architectures, standards, policies and design principles.
• Implement Zero Trust Network Access (ZTNA) and reduce VPN reliance.
• Collaborate with Cloud, Infrastructure and Compliance teams to secure landing zones.
• Translate regulatory requirements into technical security controls and KPIs.

Skills

Zero Trust

Security architecture

Cloud security

Identity security

ZTNA technologies

Education

Bachelor's degree in Cybersecurity or related

Master's degree preferred

CISSP/CCSP or equivalent

ZCCA / ZCCP certifications

Azure/AWS security certifications

Tools

ZIA

ZPA

Azure

AWS

Microsoft Defender

PIM/PAM

SAML/OIDC

Job description

Legend Biotech is seeking a Senior Cybersecurity Architect/Engineer as part of the Information Technology team based in Bridgewater, NJ or Somerset, NJ.

Role Overview

The Senior Cybersecurity Architect/Engineer is responsible for designing, implementing, and governing the organization's Zero Trust security strategy across users, devices, applications, networks, data, and cloud environments. This role serves as a senior technical leader, driving the adoption of modern security architectures that continuously verify trust, minimize attack surfaces, enforce least-privilege access, and protect critical enterprise assets.

The candidate should possess deep expertise in identity security, network security, cloud security, endpoint protection, data protection, and security architecture. This position partners closely with Infrastructure, Cloud, Digital Workplace, Enterprise Applications, Compliance, and Cybersecurity teams to ensure security controls align with business objectives while supporting a modern, flexible workforce.

The ideal candidate will have hands‑on experience with Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), and Zero Trust architecture.

Key Responsibilities

• Develop and maintain the enterprise Zero Trust architecture roadmap aligned with business and cybersecurity objectives.
• Design and implement security architectures based on NIST Zero Trust Architecture (SP 800-207), CISA Zero Trust Maturity Model, and industry best practices.
• Lead enterprise-wide Zero Trust transformation initiatives across cloud, on-premises, and hybrid environments.
• Define security reference architectures, standards, policies, and design principles.
• Conduct architecture reviews and provide guidance for new technology deployments.
• Architect micro‑segmentation and software‑defined perimeter solutions.
• Design secure access controls for:
  • Corporate networks
  • Data centers
  • Cloud environments
  • Third‑party connectivity
• Implement Zero Trust Network Access (ZTNA) technologies.
• Reduce reliance on traditional VPN architectures.
• Lead network access policy modernization initiatives.
• Design and implement security architectures across:
  • Microsoft Azure
  • AWS
• Collaborate with cloud engineering teams to establish secure landing zones.
• Implement cloud‑native security controls and posture management capabilities.
• Evaluate and improve cloud identity and access security.
• Lead implementation of Zero Trust security technologies and integrations.
• Establish security monitoring and continuous verification capabilities.
• Support incident response and threat hunting activities.
• Identify security gaps and remediation opportunities through assessments and architecture reviews.
• Develop automation and orchestration solutions to improve security operations.
• Translate regulatory and compliance requirements into technical security controls.
• Participate in risk assessments and security audits.
• Develop metrics and KPIs to measure Zero Trust maturity and effectiveness.
• Present architecture recommendations and risk findings to senior leadership.
• Strong executive communication and presentation skills.
• Ability to influence stakeholders across business and technical teams.
• Strategic thinker with strong architectural and analytical skills.
• Proven ability to lead complex enterprise transformation initiatives.
• Excellent problem‑solving and decision‑making capabilities.

Requirements

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or related discipline.
• Master's degree preferred
• Zscaler Certified Administrator (ZCCA)
• Zscaler Certified Professional (ZCCP)
• Microsoft Security certifications
• CISSP, CCSP, Security+, or equivalent certifications
• Microsoft Certified Cybersecurity Architect Expert (SC-100)
• Microsoft Security Operations Analyst (SC-200)
• Azure Solutions Architect Expert
• GIAC Security Certifications
• Network certification
• 10+ years of IT infrastructure, cybersecurity, or security engineering experience.
• 5+ years designing enterprise security architectures.
• 3+ years leading Zero Trust initiatives or enterprise identity modernization programs.
• Experience in highly regulated industries such as biotechnology, pharmaceuticals, healthcare, or financial services preferred.
• Technical Expertise:
  • Microsoft Entra ID (Azure AD)
  • Microsoft Active Directory (ADDS)
  • Conditional Access
  • Identity Governance
  • Privileged Identity Management (PIM)
  • Privileged Access Management (PAM)
  • Federation technologies supporting SSO (SAML, OAuth, OIDC)
  • Microsoft: Defender, Purview, M365, Intune, MS Graph
  • Optional: Sentinel
  • Azure
  • AWS
  • Zero Trust Network Access (ZTNA)
  • Secure Web Gateway
  • Network Micro‑Segmentation
  • Zscaler - zia, zpa, zdx
  • NIST 800-207
  • NIST Cybersecurity Framework
  • CISA Zero Trust Maturity Model
• AI Literacy: Possesses a working knowledge of AI technologies and approved AI tools, applies them responsibly to enhance productivity and decision‑making, exercises appropriate human oversight of AI‑generated outputs, and complies with organizational policies governing AI use.

• Language(s): English, Mandarin a plus

Legend Biotech is a global biotechnology company dedicated to treating and, one day, curing life‑threatening diseases. Headquartered in Bridgewater, New Jersey, we are advancing the next generation of cell therapy through a portfolio of innovative technologies, including autologous, allogeneic, and in vivo cell therapy approaches. Our research spans chimeric antigen receptor T‑cell (CAR‑T), T‑cell receptor (TCR‑T), natural killer (NK) cell‑based therapies, and other emerging platforms designed to transform the treatment of serious diseases. From our global network of research and development sites, we are committed to discovering and developing safe, effective, and cutting‑edge therapies for patients worldwide.

Legend Biotech entered into a global collaboration agreement with Johnson & Johnson to jointly develop and commercialize CARVYKTI (ciltacabtagene autoleucel; cilta‑cel). Through this strategic partnership, we combine complementary expertise and capabilities to advance innovative immunotherapies for patients living with multiple myeloma.

Please note: These benefits are offered exclusively to permanent full‑time employees. Contractors are not eligible for benefits through Legend Biotech.

Work Authorization & Employment Eligibility

Applicants must be authorized to work in the United States. As part of our commitment to maintaining a lawful workforce and ensuring compliance with federal employment regulations, we participate in the E‑Verify program. If you are selected for employment, you will be required to complete the Form I‑9 process, and your employment eligibility will be verified through E‑Verify in accordance with applicable federal law. We are committed to providing a fair, transparent, and welcoming hiring experience for all candidates.

EEO Statement

It is the policy of Legend Biotech to provide equal employment opportunities without regard to actual or perceived race, color, creed, religion, national origin, ancestry, citizenship status, age, sex or gender (including pregnancy, childbirth, related medical conditions and lactation), gender identity or gender expression (including transgender status), sexual orientation, marital status, military service and veteran status, disability, genetic information, or any other protected characteristic under applicable federal, state or local laws or ordinances.

Employment is at‑will and may be terminated at any time with or without cause or notice by the employee or the company.

For information related to our privacy notice, please review: Legend Biotech Privacy Notice.