Sr. Manager - IT

Genetix Biotherapeutics; Boston (MA); Híbrido; USD 170.000 - 185.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Health insurance

Life insurance

Disability insurance

401(k) with matching

Lifestyle spending account

Flexible time-off + paid holidays

Tuition reimbursement & loan repayment

Paid parental leave

Paid onsite parking

Commuter subsidy

Descripción de la vacante

Genetix Biotherapeutics is seeking a Senior Manager, IT in Somerville, MA, to lead security and infrastructure services for commercial products. You will guide identity, endpoint, backup, and cloud operations during a modernization phase, including Entra migration and hardening across corporate and lab environments.

This hands-on leader will manage projects through change control, build a secure, auditable operating rhythm, and collaborate with vendors and cross‑functional teams in a regulated

Formación

• Bachelor’s degree or equivalent practical IT/security experience.
• 8+ years in IT infrastructure, security operations, or systems engineering with 3+ years leading teams.
• Hands‑on identity experience with Entra ID and hybrid Active Directory.
• Experience with backup and recovery platforms and cloud networking.
• Experience managing projects through change control and with vendors.
• Experience supporting audits or compliance programs.
• Ability to apply AI tools like Claude in operations.

Responsabilidades

• Lead identity modernization across Microsoft Entra ID, Okta, and hybrid Active Directory, including SSO migrations, conditional access, MFA coverage, and authentication policy.
• Own privileged access: PIM, admin role reduction, service account governance, inventory, expiry, rotation, and stale account cleanup.
• Run access governance and least-privilege design for business apps with timely provisioning and deprovisioning.
• Own AD security backlog, directory sync health, and Group Policy migration to Intune.
• Operate core infrastructure: AWS multi-account, on‑prem and virtualized servers, firewalls, VPN, and legacy file services.
• Build and run backup and recovery, including deployment, network paths to cloud targets, restore testing, retention, and data archiving.
• Lead patching, lifecycle, and outage coordination; manage DNS and domain hygiene to reduce attack surface.
• Lead monitoring and observability, including tool replacement and alerting tied to incident response.
• Own endpoint and lab security: encryption, Secure Boot, endpoint management, DNS-layer protection, patch policy.
• Support audits and security assessments (GxP, 21 CFR Part 11, SOX, SOC 2); evidence collection and remediation.
• Partner with Quality for validated systems (LIMS/ELN) and change control; coach engineers; manage vendors.
• Define SLAs and improve intake workflows; write runbooks and SOPs for audit-ready operations.
• Apply AI tools in daily work with responsible access controls.

Conocimientos

Identity management

Entra ID

Hybrid Active Directory

SSO (Okta)

MFA

PIM

Service account governance

Intune

Backup & recovery

AWS

Microsoft 365

Change control

Vendor management

Audits/compliance

AI tools (Claude)

Communication skills

Educación

Bachelor’s degree in IT/CS/InfoSec or related field

Herramientas

Intune

Entra ID

Okta

Microsoft Entra

Descripción del empleo

At Genetix Biotherapeutics every role has meaning, every team member is respected, and every day is a chance to make a difference. When you join Genetix, you're not just landing a new role, you become part of a company that's pursuing curative gene therapies to give patients and their families more days. We are doers, thinkers and collaborators who embrace and live by our values:

Our innovation is rooted in the diversity of our teams and results are achieved through cooperation and the integration of multiple viewpoints. This is personal and we approach every challenge with radical care.

Position Summary

The Senior Manager, IT owns the day-to-day delivery of the security and infrastructure services that support Genetix’s commercial products. You will lead identity, endpoint, backup and recovery, network, and cloud operations during a period of active modernization, including a move of identity services toward Microsoft Entra, a rebuild of backup and DR, and hardening of both corporate and laboratory environments. This is a hands‑on leader who can run projects through change control in a validated, regulated environment, manage vendors, and build a team and operating rhythm that is secure, auditable, and reliable.

This role is based in Somerville, MA and follows a hybrid schedule of three days onsite per week.

To support regular in-office collaboration, only candidates within commuting distance of Somerville will be considered.

Identity & Access

• Lead identity modernization across Microsoft Entra ID, Okta, and hybrid Active Directory, including SSO migrations for business applications, conditional access, MFA coverage, and authentication policy.
• Own privileged access: PIM, admin role reduction, service account de-privileging and lifecycle (inventory, owner, expiry, rotation), and stale account cleanup.
• Run access governance and least-privilege role design for business applications, with timely provisioning and deprovisioning for employees, contractors, consultants, and managed service providers.
• Own the AD security backlog, directory sync health (Entra Connect), and Group Policy migration to Intune.

Infrastructure, Backup & Cloud

• Operate core infrastructure: AWS (multi-account, federated access, networking), on-prem and virtualized servers, firewalls and VPN, and legacy file services.
• Build and run backup and recovery, including backup platform deployment, network paths to cloud targets, restore testing, retention, and data archiving.
• Lead patching and lifecycle: OS and application patching, server and client end-of-life, and scheduled outage coordination.
• Manage DNS and domain hygiene, including verification records, decommissioned records, and legacy domain consolidation, to reduce attack surface.
• Lead monitoring and observability, including tool replacement and alerting tied to incident response.

Endpoint, Lab & Security Operations

• Own endpoint and lab security: disk encryption and Secure Boot compliance, endpoint management, DNS-layer protection, patch policy for lab and corporate systems, and removal of retired tools.
• Own intake and triage of security reports, including phishing submissions and external vulnerability disclosures, with defined response and closure.
• Support audits and customer or partner security assessments (GxP, 21 CFR Part 11, SOX, SOC 2), including questionnaires, evidence collection, and remediation tracking.

Validated Systems & Change Control

• Partner with Quality and application owners on infrastructure for validated systems (LIMS/ELN, statistical computing, lab instruments), including server builds, security hot fixes, non-production testing, regression sign-off, and change control.
• Support commercial and partner-facing systems and treatment center security and connectivity requirements.
• Lead, coach, and develop engineers and analysts; set priorities and manage workload across projects and service requests.
• Manage managed service providers and vendors (SLAs, contracts, performance, escalation).
• Define SLAs and reporting for security and infrastructure requests, and improve intake, approval, and onboarding workflows with the service desk.
• Write runbooks, SOPs, and change records so operations are repeatable and audit-ready.
• Apply AI tools such as Claude in daily work, including integrations with enterprise systems, and champion responsible AI adoption with appropriate access controls.

QUALIFICATIONS

Required

• Bachelor’s degree in IT, Computer Science, Information Security, or a related field, or equivalent practical experience.
• 8+ years in IT infrastructure, security operations, or systems engineering, including 3+ years leading people or technical teams.
• Hands‑on identity experience: Entra ID and hybrid Active Directory required; Okta or another SSO platform strongly preferred. Includes conditional access, MFA, PIM, and service account governance.
• Hands‑on experience with endpoint management (Intune), disk encryption, patching, and vulnerability management.
• Experience with backup and recovery platforms, cloud networking (AWS preferred), firewalls and VPN, and Microsoft 365.
• Experience managing projects through formal change control and managing vendors.
• Experience supporting audits or compliance programs in a regulated environment.
• Working knowledge of AI tools such as Claude (or similar) applied to operations.
• Strong communication skills, risk‑based decision making, and the ability to prioritize competing demands in a small, fast‑moving team.

Preferred

• Biotech, pharma, or GxP experience, including computer system validation and supporting lab systems and instrumentation.
• Experience modernizing hybrid environments (IdP migrations, GPO to Intune, monitoring replacement, legacy domain consolidation).
• Security or infrastructure certifications (e.g., CISSP, CISM, Security+, AWS Security Specialty, Microsoft identity/security certifications).
• Experience in a company that is rebuilding or scaling its IT function.

Additional Information

The pay transparency range provided below is based on what we believe is a reasonable estimate for the base salary pay range for this job at the time of posting. We may ultimately pay more or less than the posted range, and the range may be modified in the future. This role is eligible for an annual bonus and long‑term incentive. Actual base salary pay will be based on several factors, including but not limited to experience, skills, relevant education/qualifications, external market, internal equity, and other job‑related factors permitted by law.

Genetix’s total rewards package also provides employees with a comprehensive and competitive benefits suite to support a variety of employee needs. These benefits include comprehensive health, life and disability insurance, employer‑matched 401(k) plan, lifestyle spending account, flexible time‑off + paid holidays and winter holiday period, tuition reimbursement & loan repayment assistance, paid parental leave, paid onsite parking, commuter subsidy, and much more.

Pay Transparency

$170,000 - $185,000 USD

Genetix is proud to be an equal opportunity employer, seeking to create a welcoming and diverse environment. All applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, veteran status or any other applicable legally protected characteristics.