Sr. IAM Engineer, Infrastructure Services

Scorpion Therapeutics; Bridgewater (MA); On-site; USD 120,000 - 180,000; Full time

Job summary

Scorpion Therapeutics is seeking a Senior IAM Engineer to implement and manage enterprise identity services across AD, Entra ID, and federated multi-cloud platforms.

You will enforce least-privilege, support SSO, MFA, and automate lifecycle while partnering with Cybersecurity, IT, and QA to ensure a validated, auditable identity environment.

Role requires 8+ years in IAM and collaboration in a regulated biotech setting.

Qualifications

• Bachelor’s degree and 8+ years enterprise IAM experience.
• Hands-on AD, Entra ID, and hybrid identity design.
• Experience with SSO, MFA, CA, and identity lifecycle automation.
• Knowledge of SAML, OAuth, OIDC, LDAP.
• Experience with Entra Connect/Cloud Sync.

Responsibilities

• Administer AD DS and Entra ID users, groups, devices.
• Manage hybrid identity sync and provisioning troubleshooting.
• Maintain directory health, security, and access governance; implement SSO.
• Configure Conditional Access and passwordless; support PIM and least-privilege.
• Implement Joiner‑Mover‑Leaver workflows.
• Maintain federation across AD, Entra ID, AWS, GCP.
• Support integrations with Workday, ServiceNow, AWS, M365.
• Investigate identity alerts; support incident response; apply Zero Trust controls.
• Develop identity disaster recovery and business continuity; validate backups.
• Automate identity provisioning using PowerShell and Microsoft Graph.

Skills

Active Directory

Microsoft Entra ID

SSO & federation

MFA & Conditional Access

PowerShell automation

Identity lifecycle automation

Zero Trust security

LDAP

AWS/GCP federation

Education

Bachelor’s degree in IT/Computer Science or related

Tools

Entra Connect/Cloud Sync

Microsoft Graph API

GPOs

Windows Server

Job description

The Senior Identity and Access Management (IAM) Engineer will implement, administer, and continuously improve enterprise identity services across Active Directory, Microsoft Entra ID, and federated multi-cloud and SaaS platforms. Ensure identity systems are secure, resilient, compliant, and audit-ready; enable modern authentication, automated lifecycle management, and least-privilege access. Partner with Cybersecurity, Infrastructure & Operations, Enterprise Applications, Computer System Validation (CSV), and Quality Assurance (QA) to maintain a validated identity environment for regulatory and modernization needs.

What You’ll Do

• Administer Active Directory Domain Services and Microsoft Entra ID (users, groups, devices).
• Manage hybrid identity sync (Entra ID Connect/Cloud Sync) and troubleshoot provisioning/synchronization.
• Maintain directory health/replication/security and access governance; implement SSO (SAML, OIDC, OAuth, LDAP).
• Configure Conditional Access, MFA, passwordless; support Privileged Identity Management (PIM) and enforce least-privilege.
• Implement Joiner‑Mover‑Leaver identity lifecycle and governance workflows.
• Maintain federation across AD, Entra ID, AWS, GCP, and enterprise SaaS; troubleshoot authentication/federation/provisioning.
• Support integrations with Workday, ServiceNow, AWS, Microsoft 365, and regulated applications.
• Investigate identity alerts; support incident response; implement Zero Trust‑aligned identity security controls.
• Develop/maintain identity disaster recovery and business continuity; validate backup/restore/failover.
• Automate identity provisioning using PowerShell and Microsoft Graph/scripting.

Who You Are (Qualifications)

• Bachelor’s degree in IT/Computer Science or related + 8+ years supporting enterprise IAM or Directory Services.

You Are Or You Have (Required)

• Hands‑on Active Directory (users/groups/GPOs/trusts/replication/security admin).
• Entra ID administration and hybrid identity design.
• Experience with SSO, MFA, Conditional Access, and identity lifecycle automation.
• Knowledge of SAML, OAuth, OIDC, LDAP.
• Experience with Entra Connect/Cloud Sync.
• Federation support across AD/Entra ID/AWS/GCP.
• Identity security operations, incident response, or resilience planning.

Nice to Have

• Okta and Entra ID experience.
• Life Sciences/Pharma/GxP regulated environment experience.
• Microsoft 365 security/compliance familiarity.
• PowerShell/Microsoft Graph API automation.
• Microsoft certifications (Identity and Access Administrator Associate, Azure Administrator Associate, Windows Server/Active Directory).