Senior IAM Engineer - Identity Governance & Administration

The Role Moderna is seeking a Senior IAM Engineer with expertise in Identity Governance & Administration (IGA) to help design, build, and scale our identity governance capabilities across the enterprise. This role combines technical leadership with hands‑on engineering, focused on access governance, identity lifecycle management, and provisioning across a complex, highly regulated environment. You will play a key role in establishing scalable and secure identity governance processes and integrating them across Moderna’s technology landscape. You’ll partner closely with IAM, Cybersecurity, Compliance, and application teams to deliver identity solutions that are secure, scalable, and aligned with business needs. Here’s What You’ll Do Serve as a senior technical leader and hands‑on engineer for Identity Governance & Administration (IGA), contributing to both platform strategy and engineering execution Lead and actively contribute to the design, implementation, and continuous improvement of identity governance capabilities, including: Access request and approval workflows Identity lifecycle management (Joiner/Mover/Leaver processes) Access certifications and recertifications Role‑based access control (RBAC) and access policies Design and implement scalable provisioning and deprovisioning solutions across enterprise systems and applications Partner with business stakeholders and application owners to gather requirements and translate them into technical designs and governance models Integrate IAM/IGA solutions with enterprise systems, including Active Directory, Entra ID, Okta, and SaaS applications Develop and maintain workflows, automation, and integrations using APIs, scripting, and modern identity standards (e.g., SCIM, REST APIs) Troubleshoot complex access, provisioning, and identity governance issues across systems and platforms Evaluate the current identity governance landscape, identify gaps, and drive improvements in security, scalability, and user experience Establish and support governance processes aligned with regulatory and audit requirements (e.g., GxP, SOX), including access reviews and policy enforcement Develop documentation, standards, and runbooks to support consistency, scalability, and audit readiness Collaborate with cybersecurity, infrastructure, and compliance teams to align identity governance controls with enterprise security strategy Stay current with industry trends, emerging technologies, and best practices in IAM and identity governance Here’s What You’ll Need (Minimum Qualifications) Bachelor’s degree in Computer Science, Information Security, or related field (or equivalent experience) 8+ years of experience in IT, cybersecurity, or identity engineering 5+ years of experience in Identity and Access Management (IAM), with strong exposure to Identity Governance & Administration (IGA) Hands‑on experience implementing or supporting IGA capabilities such as lifecycle management, provisioning, and access certifications Experience integrating IAM solutions with enterprise systems and applications (e.g., Active Directory, Entra ID, Okta, SaaS platforms) Experience with identity lifecycle processes, including provisioning, deprovisioning, and role‑based access control Experience working with APIs, automation, and scripting (e.g., PowerShell, JSON, REST APIs) Strong understanding of identity security principles, including least privilege, Zero Trust, and access governance Experience working in complex, fast‑paced environments with the ability to manage multiple priorities Here’s What You’ll Bring to the Table (Preferred Qualifications) Experience implementing one or more IGA platforms (e.g., SailPoint, Saviynt, Omada, One Identity) Experience supporting or leading IGA platform selection efforts, including participation in RFP/RFI processes, vendor evaluations, and proof‑of‑concept (POC) activities Experience designing and implementing access certification programs, governance models, and role frameworks (RBAC/ABAC) Experience with ServiceNow or similar platforms for access request workflows and automation Familiarity with identity architecture in hybrid environments (on‑prem and cloud) Experience working in regulated environments (GxP, SOX, or similar) Strong understanding of identity governance best practices and industry frameworks Experience with automation tools and scripting (PowerShell, APIs, etc.) Relevant certifications such as CISSP, CISM, or IAM/IGA‑related certifications Strong analytical, problem‑solving, and communication skills, with the ability to influence both technical and non‑technical stakeholders A desire to make an impact as part of a high‑growth, transformational company that is Bold, Relentless, Curious, and Collaborative Pay & Benefits At Moderna, we believe that when you feel your best, you can do your best work. That’s why our US benefits and global well‑being resources are designed to support you—at work, at home, and everywhere in between. Best‑in‑class healthcare coverage, plus voluntary benefit programs to support your unique needs A holistic approach to well‑being, with access to fitness, mindfulness, and mental health support Family planning benefits, including fertility, adoption, and surrogacy support Generous paid time off, including vacation, volunteer days, sabbatical, global recharge days, and a discretionary year‑end shutdown Savings and investment opportunities to help you plan for the future Location‑specific perks and extras The salary range for this role is $130,800.00 - $209,400.00. This is the lowest to highest salary we in good faith believe we would pay for this role at the time of this posting. An individual’s position within the salary range will be based on several factors including, but not limited to, specific competencies, relevant education, qualifications, certifications, experience, skills, performance, and business or organizational needs. The successful candidate may be eligible for an annual discretionary bonus, other incentive compensation, or equity award, subject to company plan eligibility criteria and individual performance. Equal Opportunities Moderna is committed to equal employment opportunity and non‑discrimination for all employees and qualified applicants without regard to a person's race, color, sex, gender identity or expression, age, religion, national origin, ancestry or citizenship, ethnicity, disability, military or protected veteran status, genetic information, sexual orientation, marital or familial status, or any other personal characteristic protected under applicable law. Moderna is a place where everyone can grow. If you meet the Basic Qualifications for the role and you would be excited to contribute to our mission every day, please apply! Moderna is an E‑Verify Employer in the United States. We consider qualified applicants regardless of criminal histories, consistent with legal requirements. Accommodations We’re focused on attracting, retaining, developing, and advancing our employees. By cultivating a workplace that values diverse experiences, backgrounds, and ideas, we create an environment where every employee can contribute their best. Moderna is committed to offering reasonable accommodations to qualified job applicants with disabilities. Any applicant requiring an accommodation in connection with the hiring process and/or to perform the essential functions of the position for which the applicant has applied should contact the Accommodations team at View email address on click.appcast.io. Export Control Notice This position may involve access to technology or data that is subject to U.S. export control laws, including the Export Administration Regulations (EAR). As such, employment is contingent upon the applicant’s ability to access export‑controlled information in accordance with U.S. law. Due to the nature of the work and regulatory requirements, only individuals who qualify as U.S. persons (citizens, permanent residents, asylees, or refugees) are eligible for this position. For this role Moderna is unable to sponsor non‑U.S. persons to apply for an export control license. #J-18808-Ljbffr