Senior Manager, Authentication Engineer

Jobtailor

New York (NY)

Hybrid

USD 150,000 - 230,000

Full time

11 days ago

Get more replies from employers

Send a job-specific resume in minutes.

Job summary

Pfizer is seeking an experienced Identity and Access Management leader to architect and drive a comprehensive authentication strategy across enterprise applications. The role focuses on SSO adoption, MFA, and scalable IAM across cloud and on‑prem services.

You will collaborate with IT, security, product, and Cybersecurity teams, and guide secure access practices while ensuring SOX/GXP compliance. Hybrid work from Pfizer offices 2–3 days weekly, with international travel up to 10%.

Qualifications

Bachelor’s degree in a relevant discipline.
6+ years in identity and access management.
At least 4 years focused on SSO solutions.
Strong background in IT security, authentication protocols, and IAM frameworks for large user bases.
Deep understanding of SAML, OAuth and OpenID Connect.
Experience with identity federation, MFA, and cloud IAM.
Knowledge of Okta, Azure AD or Ping Identity.
Able to solve complex authentication problems in a global environment.
SOX and GXP regulations awareness.
Proven track record leading long-term IAM projects.
Agile work experience.
Master’s degree preferred.
Strong Ping Identity expertise desirable.
On-site at Pfizer office 2–3 days/week; US work authorization required.

Responsibilities

Develop and execute a comprehensive authentication strategy for enterprise apps.
Drive SSO adoption and improve identity management ecosystem.
Oversee design, implementation, and optimization of SSO/MFA framework.
Ensure scalable and resilient authentication services integrated with cloud and third-party systems.
Collaborate with IT, security, development, product, and stakeholders.
Lead best practices for secure access management and regulatory alignment.
Lead IAM security controls and tooling implementations.
Manage vendor relationships and incident handling for SSO/MFA.
Improve user login experience and KPIs for SSO performance.
Report on security metrics, breaches, and effectiveness.
Lead IAM teams within a Global Business Unit and drive long-term projects.
Travel internationally and domestically under 10%.

Skills

Identity Management

Single Sign-On (SSO) Solutions

Multi-Factor Authentication (MFA)

SAML

OAuth

OpenID Connect

Encryption

Tokenization

Cloud-Based IAM Solutions

Project Management

Education

Bachelor’s degree

Master’s degree (preferred)

Tools

Okta

Azure AD

Ping Identity

IAM Tools

SSO Solutions

Job description

Develop and execute a comprehensive Authentication strategy for secure, user-friendly access across enterprise applications and platforms
Drive Single Sign-On adoption and improve the identity management ecosystem
Oversee design, implementation, and optimization of the SSO/MFA framework
Ensure authentication services are scalable, resilient, and integrated with internal, third‑party, and cloud‑based services
Collaborate with IT, security, development, product, Cybersecurity, Infrastructure, Cloud Engineering, Application Development, and business stakeholders
Guide best practices for secure access management
Ensure SSO solutions align with GDPR, HIPAA, NIST, SOX, GXP, and other applicable regulations and standards
Lead development and implementation of authentication and authorization security controls
Evaluate and select identity management tools, SSO solutions, MFA, and identity federation technologies
Manage vendor and third‑party provider relationships
Lead investigation and resolution of SSO/MFA incidents and implement improvements to minimize disruptions
Improve end‑user experience by simplifying login processes and reducing friction
Develop KPIs for SSO performance and security metrics
Report on SSO effectiveness, user engagement, security breaches, and other relevant metrics
Lead IAM system support, engineering, and operations teams within a Global Business Unit
Manage and execute long‑term complex projects
Travel internationally and domestically periodically, less than 10%

Requirements

Bachelor’s degree in relevant discipline
6+ years of experience in identity and access management
At least 4 years focused on Single Sign-On (SSO) solutions
Strong background in IT security, authentication protocols, and IAM frameworks supporting SSO for more than 50,000 users
Deep understanding of SAML, OAuth, and OpenID Connect
Experience with identity federation, multi‑factor authentication, and cloud‑based IAM solutions
Knowledge of identity providers such as Okta, Azure AD, or Ping Identity
Ability to solve highly complex authentication and authorization problems in a global environment
Strong understanding of encryption, tokenization, and secure protocols
Experience leading IAM system support, engineering, and operations teams within a Global Business Unit
Understanding of Sarbanes‑Oxley (SOX) and GXP quality regulations and guidelines
Proven track record managing and executing long‑term complex projects
Demonstrated experience in an agile work environment
Master’s degree in relevant discipline preferred
Deep expertise in Ping Identity solutions highly desirable
Must be able to work from the assigned Pfizer office 2‑3 days per week, or as needed by the business
Must be authorized to be employed in the U.S. by any employer
Must have permanent work authorization in the United States
U.S. work visa sponsorship is not available now or in the future
Capable of working through a personal laptop computer or mobile device for extended periods

Core Competencies

Demonstrates expertise in developing and executing comprehensive authentication strategies, focusing on Single Sign-On (SSO) solutions and identity management frameworks. Proficient in managing complex projects and leading IAM system support within a global environment while ensuring compliance with relevant regulations.

Highest-signal resume keywords