Senior Manager, Authentication Engineer

Relha LLC; New York (NY); Hybrid; USD 124,000 - 207,000; Full time

Job summary

Pfizer is seeking a Senior Manager of Authentication to lead strategy, architecture, and operations of enterprise authentication across on‑prem, cloud, and hybrid environments. You will drive SSO adoption, manage MFA, and oversee identity federation to deliver secure, scalable access.

Collaborating with Cybersecurity, IT, cloud, and product teams, you will ensure regulatory alignment (GDPR, HIPAA, NIST) and resilient incident response while improving user experience and availability for a global

Qualifications

• 6+ years in identity and access management, with at least 4 years focused on SSO solutions.
• Strong background in IT security, authentication protocols, and IAM frameworks.
• Experience with SSO technologies (SAML, OAuth, OpenID Connect) and identity federation.
• Knowledge of identity providers like Okta, Azure AD, or Ping Identity.
• Ability to solve highly complex authentication and authorization problems within a Global environment.
• Understanding security best practices related to identity management, including encryption, tokenization, and secure protocols.
• Experience leading IAM system support, engineering, and operations teams within a Global Business Unit.
• Understanding of SOX and GXP quality regulations and guidelines.
• Proven track record managing long-term complex projects in an agile environment.

Responsibilities

• Develop and execute a comprehensive Authentication strategy to ensure secure, user-friendly access across enterprise applications and platforms.
• Oversee design, implementation, and optimization of the SSO/MFA framework for scalability and resilience, including cloud integrations.
• Collaborate with IT, security, development, and product teams to integrate SSO & MFA into new and existing platforms.
• Maintain compliance with GDPR, HIPAA, NIST and related regulations; lead security controls for authentication and authorization.
• Evaluate and select identity tools; manage vendor relationships and ongoing support.
• Lead investigation and resolution of SSO/MFA incidents to minimize disruptions.
• Improve end-user experience by reducing login friction and increasing adoption.
• Develop KPIs for SSO performance and security metrics; report regularly on security posture.

Skills

SSO technologies

MFA

Identity federation

Cloud IAM

SAML

OAuth

OpenID Connect

Okta/Azure AD/Ping Identity

Global IAM

Job description

Pfizer's Identity Security and Access Management (ISAM) organization delivers seamless, secure, modern, and scalable identity solutions for all platforms and identity types. Our mission is to design, implement, and maintain a centralized, modern, and scalable Identity Security and Access Management (ISAM) ecosystem that secures digital assets across all platform and identity types, improves end-user experiences and strengthens our overall security posture, while maintaining compliance with global regulatory requirements. We achieve this mission through a combination of world-class talent, top-tier technologies and industry leading best practices

The Senior Manager of Authentication is responsible for the strategy, architecture, implementation, and operational management of enterprise authentication services across on-premises, cloud, and hybrid environments. This leader oversees authentication platforms, Multi-Factor Authentication (MFA), Single Sign-On (SSO), passwordless authentication, federation, and identity security initiatives. The role partners closely with Cybersecurity, Infrastructure, Cloud Engineering, Application Development, and business stakeholders to deliver secure, scalable, and highly available authentication solutions that improve user experience while reducing organizational risk.

ROLE RESPONSIBILITIES

Develop and execute a comprehensive Authentication strategy to ensure secure and user-friendly access across all enterprise applications and platforms. Drive SSO adoption and improve the overall identity management ecosystem.

Oversee the design, implementation, and ongoing optimization of the SSO / MFA framework. Ensure it is scalable, resilient, and integrated with both internal and third-party services, including cloud-based applications.

Cross-Functional Collaboration:

Work closely with cross-functional teams including IT, security, development, and product teams to ensure seamless integration of SSO & MFA capabilities into new and existing platforms. Provide guidance on best practices for secure access management.

Security & Compliance:

Maintain a strong understanding of security protocols and compliance standards (e.g., GDPR, HIPAA, NIST) and ensure that SSO solutions align with relevant regulations and industry standards. Lead the development and implementation of security controls related to authentication and authorization.

Evaluate and select appropriate identity management tools, including SSO solutions, Multi-Factor Authentication (MFA), and Identity Federation. Manage relationships with vendors and third-party providers, ensuring successful product implementation and ongoing support.

Lead the team in investigating and resolving any issues related to SSO / MFA functionality. Ensure that incidents are managed efficiently, and improvements are implemented to minimize future disruptions.

User Experience Focus:

Ensure that SSO implementation improves the end-user experience by simplifying login processes while maintaining high-security standards. Work on reducing friction points and increasing user adoption.

Metrics & Reporting:

Help develop key performance indicators (KPIs) for SSO performance and security metrics. Regularly report on SSO effectiveness, user engagement, security breaches, and other relevant metrics.

BASIC QUALIFICATIONS

6+ years of experience in identity and access management, with at least 4 years focused on Single Sign-On (SSO) solutions. Strong background in IT security, authentication protocols, and IAM frameworks supporting SSO with greater than 50,000 users.

Deep understanding of SSO technologies (e.g., SAML, OAuth, OpenID Connect) and experience with identity federation, multi-factor authentication (MFA), and cloud-based IAM solutions. Knowledge of identity providers like Okta, Azure AD, or Ping Identity.

Able to solve highly complex authentication and authorization problems within a Global environment.

Strong understanding of security best practices related to identity management, including encryption, tokenization, and secure protocols.

Experience in leading IAM system support, engineering, and operations teams within a Global Business Unit.

Understanding of applicable laws and regulations including Sarbanes-Oxley (SOX) and GXP quality regulations and guidelines.

Holds relevant stakeholders and project teams accountable and have a proven track record of successfully managing and executing on long term complex projects.

Demonstrated experience in an agile work environment possessing qualities such as a collaborative mindset, adaptability to change, and a proactive problem-solving approach.

PREFERRED QUALIFICATIONS

Deep expertise in Ping Identity solutions is highly desirable.

Candidate demonstrates a breadth of diverse leadership experiences and capabilities including: the ability to influence and collaborate with peers, develop and coach others, oversee and guide the work of other colleagues to achieve meaningful outcomes and create business impact.

PHYSICAL/MENTAL REQUIREMENTS

No special physical requirements. Applicants should be capable of working through a personal laptop computer or mobile device for extended periods.

NON-STANDARD WORK SCHEDULE, TRAVEL OR ENVIRONMENT REQUIREMENTS

Periodic international and domestic travel required (less than 10%)

Other Job Details:

Last Date to Apply for Job: August 20, 2026

Work Location Assignment: Hybrid. Must be able to work from assigned Pfizer office 2-3 days per week, or as needed by the business

The annual base salary for this position ranges from $124,400.00 to $207,400.00. In addition, this position is eligible for participation in Pfizer's Global Performance Plan with a bonus target of 17.5% of the base salary and eligibility to participate in our share based long term incentive program. We offer comprehensive and generous benefits and programs to help our colleagues lead healthy lives and to support each of life’s moments. Benefits offered include a 401(k) plan with Pfizer Matching Contributions and an additional Pfizer Retirement Savings Contribution, paid vacation, holiday and personal days, paid caregiver/parental and medical leave, and health benefits to include medical, prescription drug, dental and vision coverage. Learn more at Pfizer Candidate Site - U.S. Benefits | (uscandidates.mypfizerbenefits.com). Pfizer compensation structures and benefit packages are aligned based on the location of hire. The United States salary range provided does not apply to Tampa, FL or any location outside of the United States.

This role is posted in multiple locations. If you are applying for the role in an secondary job posting location where pay transparency regulations apply, your Talent Advisor will share the local pay information with you during the first interview.

Relocation assistance may be available based on business needs and/or eligibility.

Candidates must be authorized to be employed in the U.S. by any employer.

U.S. work visa sponsorship (such as TN, O-1, H-1B, etc.) is not available for this role now or in the future.

Sunshine Act

Pfizer reports payments and other transfers of value to health care providers as required by federal and state transparency laws and implementing regulations. These laws and regulations require Pfizer to provide government agencies with information such as a health care provider’s name, address and the type of payments or other value received, generally for public disclosure. Subject to further legal review and statutory or regulatory clarification, which Pfizer intends to pursue, reimbursement of recruiting expenses for licensed physicians may constitute a reportable transfer of value under the federal transparency law commonly known as the Sunshine Act. Therefore, if you are a licensed physician who incurs recruiting expenses as a result of interviewing with Pfizer that we pay or reimburse, your name, address and the amount of payments made currently will be reported to the government. If you have questions regarding this matter, please do not hesitate to contact your Talent Acquisition representative.

Pfizer is committed to equal opportunity in the terms and conditions of employment for all employees and job applicants without regard to race, color, religion, sex, sexual orientation, age, gender identity or gender expression, national origin, disability or veteran status. Pfizer also complies with all applicable national, state and local laws governing nondiscrimination in employment as well as work authorization and employment eligibility verification requirements of the Immigration and Nationality Act and IRCA. Pfizer is an E-Verify employer. This position requires permanent work authorization in the United States.

Pfizer endeavors to make www.pfizer.com/careers accessible to all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process and/or interviewing, please email [emailprotected] . This is to be used solely for accommodation requests with respect to the accessibility of our website, online application process and/or interviewing. Requests for any other reason will not be returned.

To learn more about acceptable and prohibited uses of AI during the recruitment process, please review our candidate AI-use guidelines available on Pfizer Careers.