Sr. Manager - IT

Genetix Biotherapeutics; Somerville (MA); Hybrid; USD 170,000 - 185,000; Full time

Benefits offered by this job

Health insurance

401(k) plan

Paid holidays

Tuition reimbursement

Job summary

Genetix Biotherapeutics is seeking a Senior Manager, IT in Somerville, MA, to lead security, identity, and infrastructure modernization. This hands-on leader will drive Entra ID, Okta, and hybrid AD migrations, manage backups, patching, and cloud networking, and partner with Quality for validated systems.

The role is hybrid with three days onsite weekly and requires 8+ years in IT/security with leadership experience. Applicants within commuting distance of Somerville are preferred.

Qualifications

• Bachelor’s degree in IT, CS, Info Security, or equivalent practical experience.
• 8+ years in IT infrastructure, security operations, or systems engineering, incl. 3+ years leading teams.
• Hands-on identity experience: Entra ID & hybrid AD; SSO including MFA & PIM.
• Endpoint management (Intune), disk encryption, patching, vulnerability mgmt.
• Backup and recovery platforms, cloud networking (AWS), firewalls & VPN, Microsoft 365.
• Change control & vendor management in regulated environments.
• Audits/compliance support (GxP, 21 CFR Part 11, SOX, SOC 2).
• Experience with AI tools like Claude in operations.

Responsibilities

• Lead identity modernization across Entra ID, Okta, and hybrid AD with SSO migrations.
• Own privileged access management, lifecycle, and governance for employees and MSPs.
• Oversee backup, DR planning, and cloud/network security for on-prem and cloud infra.
• Manage endpoint, lab security, patching, and vulnerability response.
• Partner with Quality on validated systems, runbooks, and change control processes.
• Coach engineers, manage vendors, and define security SLAs and dashboards.
• Champion AI adoption with proper access controls and governance.

Skills

Identity management

Entra ID

Okta

Hybrid Active Directory

MFA

PIM

Intune

Backup & recovery

AWS

Security operations

Change control

Vendor management

Audits & compliance

AI tools (Claude)

Education

Bachelor’s degree in IT/CS/Info Security

Tools

Entra ID

Okta

Intune

AWS

Microsoft 365

Entra Connect

Job description

At Genetix Biotherapeutics every role has meaning, every team member is respected, and every day is a chance to make a difference. When you join Genetix, you're not just landing a new role, you become part of a company that's pursuing curative gene therapies to give patients and their families more days. We are doers, thinkers and collaborators who embrace and live by our values:

Our innovation is rooted in the diversity of our teams and results are achieved through cooperation and the integration of multiple viewpoints. This is personal and we approach every challenge with radical care.

Position Summary

The Senior Manager, IT owns the day-to-day delivery of the security and infrastructure services that support Genetix’s commercial products. You will lead identity, endpoint, backup and recovery, network, and cloud operations during a period of active modernization, including a move of identity services toward Microsoft Entra, a rebuild of backup and DR, and hardening of both corporate and laboratory environments. This is a hands‑on leader who can run projects through change control in a validated, regulated environment, manage vendors, and build a team and operating rhythm that is secure, auditable, and reliable.

This role is based in Somerville, MA and follows a hybrid schedule of three days onsite per week.

To support regular in-office collaboration, only candidates within commuting distance of Somerville will be considered.

Identity & Access

• Lead identity modernization across Microsoft Entra ID, Okta, and hybrid Active Directory, including SSO migrations for business applications, conditional access, MFA coverage, and authentication policy.
• Own privileged access: PIM, admin role reduction, service account de-privileging and lifecycle (inventory, owner, expiry, rotation), and stale account cleanup.
• Run access governance and least-privilege role design for business applications, with timely provisioning and deprovisioning for employees, contractors, consultants, and managed service providers.
• Own the AD security backlog, directory sync health (Entra Connect), and Group Policy migration to Intune.

Infrastructure, Backup & Cloud

• Operate core infrastructure: AWS (multi-account, federated access, networking), on-prem and virtualized servers, firewalls and VPN, and legacy file services.
• Build and run backup and recovery, including backup platform deployment, network paths to cloud targets, restore testing, retention, and data archiving.
• Lead patching and lifecycle: OS and application patching, server and client end-of-life, and scheduled outage coordination.
• Manage DNS and domain hygiene, including verification records, decommissioned records, and legacy domain consolidation, to reduce attack surface.
• Lead monitoring and observability, including tool replacement and alerting tied to incident response.

Endpoint, Lab & Security Operations

• Own endpoint and lab security: disk encryption and Secure Boot compliance, endpoint management, DNS-layer protection, patch policy for lab and corporate systems, and removal of retired tools.
• Own intake and triage of security reports, including phishing submissions and external vulnerability disclosures, with defined response and closure.
• Support audits and customer or partner security assessments (GxP, 21 CFR Part 11, SOX, SOC 2), including questionnaires, evidence collection, and remediation tracking.

Validated Systems & Change Control

• Partner with Quality and application owners on infrastructure for validated systems (LIMS/ELN, statistical computing, lab instruments), including server builds, security hot fixes, non-production testing, regression sign-off, and change control.
• Support commercial and partner-facing systems and treatment center security and connectivity requirements.
• Lead, coach, and develop engineers and analysts; set priorities and manage workload across projects and service requests.
• Manage managed service providers and vendors (SLAs, contracts, performance, escalation).
• Define SLAs and reporting for security and infrastructure requests, and improve intake, approval, and onboarding workflows with the service desk.
• Write runbooks, SOPs, and change records so operations are repeatable and audit-ready.
• Apply AI tools such as Claude in daily work, including integrations with enterprise systems, and champion responsible AI adoption with appropriate access controls.

QUALIFICATIONS

Required

• Bachelor’s degree in IT, Computer Science, Information Security, or a related field, or equivalent practical experience.
• 8+ years in IT infrastructure, security operations, or systems engineering, including 3+ years leading people or technical teams.
• Hands‑on identity experience: Entra ID and hybrid Active Directory required; Okta or another SSO platform strongly preferred. Includes conditional access, MFA, PIM, and service account governance.
• Hands‑on experience with endpoint management (Intune), disk encryption, patching, and vulnerability management.
• Experience with backup and recovery platforms, cloud networking (AWS preferred), firewalls and VPN, and Microsoft 365.
• Experience managing projects through formal change control and managing vendors.
• Experience supporting audits or compliance programs in a regulated environment.
• Working knowledge of AI tools such as Claude (or similar) applied to operations.
• Strong communication skills, risk‑based decision making, and the ability to prioritize competing demands in a small, fast‑moving team.

Preferred

• Biotech, pharma, or GxP experience, including computer system validation and supporting lab systems and instrumentation.
• Experience modernizing hybrid environments (IdP migrations, GPO to Intune, monitoring replacement, legacy domain consolidation).
• Security or infrastructure certifications (e.g., CISSP, CISM, Security+, AWS Security Specialty, Microsoft identity/security certifications).
• Experience in a company that is rebuilding or scaling its IT function.

Additional Information

The pay transparency range provided below is based on what we believe is a reasonable estimate for the base salary pay range for this job at the time of posting. We may ultimately pay more or less than the posted range, and the range may be modified in the future. This role is eligible for an annual bonus and long‑term incentive. Actual base salary pay will be based on several factors, including but not limited to experience, skills, relevant education/qualifications, external market, internal equity, and other job‑related factors permitted by law.

Genetix’s total rewards package also provides employees with a comprehensive and competitive benefits suite to support a variety of employee needs. These benefits include comprehensive health, life and disability insurance, employer‑matched 401(k) plan, lifestyle spending account, flexible time‑off + paid holidays and winter holiday period, tuition reimbursement & loan repayment assistance, paid parental leave, paid onsite parking, commuter subsidy, and much more.

Pay Transparency

$170,000 - $185,000 USD

Genetix is proud to be an equal opportunity employer, seeking to create a welcoming and diverse environment. All applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, veteran status or any other applicable legally protected characteristics.