Senior Manager, Authentication Engineer

Scorpion Therapeutics; Pennsylvania; On-site; USD 150,000 - 190,000; Full time

Benefits offered by this job

Bonus plan (17.5% target)

401(k) match

Paid vacation/holidays/personal days

Medical/dental/vision coverage

Job summary

Scorpion Therapeutics seeks an IAM leader to define and drive our authentication program. You will own SSO/MFA strategy, align security controls with GDPR/HIPAA, and collaborate across IT, security, and product to secure access for thousands of users.

The role requires deep IAM expertise, experience with Okta/Azure AD/Ping, and a track record of implementing scalable identity solutions in global environments. A strong Agile background is advantageous.

Qualifications

• Bachelor’s degree required.
• 6+ years in IAM with 4+ years on SSO and 50,000+ users.
• Expertise in SSO technologies (SAML, OAuth, OpenID Connect) and cloud IAM.
• Experience with Okta, Azure AD, and Ping Identity.
• Ability to solve complex authentication/authorization problems in global environments.
• Knowledge of security best practices (encryption, tokenization, secure protocols).
• Experience leading IAM support/engineering/operations teams in a global business unit.
• Understanding of SOX and GXP regulations; accountable leadership on long-term complex projects.
• Agile experience; collaborative, adaptable, proactive problem-solving.

Responsibilities

• Develop and execute an Authentication strategy; drive SSO adoption and improve identity management.
• Oversee design, implementation, and optimization of SSO/MFA framework for scalable, resilient integration with internal and third-party/cloud services.
• Collaborate with IT/security/development/product to integrate SSO/MFA into platforms; provide secure access best practices.
• Ensure security and compliance alignment (e.g., GDPR, HIPAA, NIST); lead security controls for authentication/authorization.
• Evaluate and select identity tools (SSO, MFA, federation); manage vendor/third-party relationships.
• Lead incident investigation and resolution for SSO/MFA; implement improvements to prevent recurrence.
• Improve end-user experience by simplifying login while maintaining security.
• Define and report KPIs for SSO performance, security metrics, breaches, and engagement.

Skills

SSO technologies

OAuth

OpenID Connect

SAML

MFA

cloud IAM

Okta

Azure AD

Ping Identity

Education

Bachelor’s degree

Master’s degree (preferred)

Tools

Okta

Azure AD

Ping Identity

Job description

Role Responsibilities

• Develop and execute an Authentication strategy; drive SSO adoption and improve identity management.


• Oversee design, implementation, and optimization of SSO/MFA framework (scalable, resilient, integrated with internal and third-party/cloud services).


• Collaborate with IT/security/development/product to integrate SSO/MFA into platforms; provide secure access best practices.


• Ensure security and compliance alignment (e.g., GDPR, HIPAA, NIST); lead security controls for authentication/authorization.


• Evaluate and select identity tools (SSO, MFA, federation); manage vendor/third-party relationships.


• Lead incident investigation and resolution for SSO/MFA; implement improvements to prevent recurrence.


• Improve end-user experience by simplifying login while maintaining security.


• Define and report KPIs for SSO performance, security metrics, breaches, and engagement.

Basic Qualifications

• Bachelor’s degree.


• 6+ years in IAM; 4+ years focused on SSO; IAM/authentication/security background supporting SSO for 50,000+ users.


• Expertise in SSO technologies (SAML, OAuth, OpenID Connect); federation, MFA, cloud IAM; experience with Okta/Azure AD/Ping.


• Ability to solve complex authentication/authorization problems in global environments.


• Knowledge of security best practices (encryption, tokenization, secure protocols).


• Experience leading IAM support/engineering/operations teams in a global business unit.


• Understanding of SOX and GXP regulations; accountable leadership on long-term complex projects.


• Agile experience; collaborative, adaptable, proactive problem-solving.

Preferred Qualifications

• Master’s degree; deep expertise in Ping Identity.

Benefits

Eligible for Pfizer Global Performance Plan bonus (17.5% target) and share-based long-term incentives; 401(k) match/retirement contribution; paid vacation/holidays/personal days; paid caregiver/parental and medical leave; medical/prescription/dental/vision coverage.