Sr. IT Solution Architect, Access Automation

About This RoleBiogen is seeking an experienced Solution Architect\Delivery Lead\ IT System Owner to lead the design, architecture, and implementation of enterprise Identity and Access Management (IAM) solutions using the SailPoint platform. The ideal candidate will possess strong expertise in IAM governance, access certification, role management, provisioning, application onboarding, and integration with enterprise systems.The position sits within Enterprise IT Services under the Enterprise Application Services organization and exists to strengthen Biogen’s access automation capabilities, application security, and GxP/Quality compliance programs by delivering scalable, secure, and well-governed identity governance solutions. The role translates business, security, and compliance requirements into technical architecture, implementation roadmaps, integrations, and operational processes. It partners closely with other areas within Enterprise IT Services, Cybersecurity, AMS, Infrastructure, application areas in other functions, IT Quality, and business teams to ensure access lifecycle, provisioning, certification, role management, and audit needs are met effectively.This is a hybrid role requiring on site presence 3 days per week in our offices. This position can be based in either Cambridge, MA or Research Triangle Park, NC . The pay range posted encompasses the pay range for both potential work locations. Actual pay will be determined by the selected candidate’s work location, as well as relevant experience and qualifications.What You’ll DoArchitecture & Solution Design· Design & implement enterprise-wide Identity Governance and Administration (IGA) solutions using SailPoint Identity Security Cloud (ISC) and ServiceNow as a front end· Define IAM architecture, standards, and best practices aligned with security and compliance requirements.· Create high-level and low-level solution designs, architecture diagrams, and implementation roadmaps.· Evaluate business requirements and translate them into SailPoint technical solutions.Implementation & Integration· Lead SailPoint implementation projects from design through deployment.· Design and oversee integrations with:Active DirectoryLDAPHR systems (Workday, Fieldglass)ERP systems (Oracle)Cloud applications (ServiceNow, Salesforce, O365, etc.)· Design provisioning and de-provisioning workflows.· Configure access certifications, lifecycle events, role management, policy violations, and segregation of duties (SoD).Leadership & Governance· Provide technical leadership and guidance to IAM engineers, developers, and administrators.· Conduct architecture and design reviews.· Establish governance processes for identity lifecycle management.· Lead client workshops and requirements gathering sessions.· Mentor team members and promote IAM best practices.Security & Compliance· Ensure solutions comply with regulatory requirements such as GxP, SOX.· Implement security controls, risk mitigation measures, and audit requirements.· Support internal and external audits related to identity management.Stakeholder Management· Work closely with business, security, infrastructure, and application teams.· Present architectural recommendations to senior leadership and clients.· Manage technical risks and project dependencies.Who You AreYou are resourceful and driven IT professional who has a track record of delivering superior customer experience.Education· Bachelor’s degree in computer science, Information Technology, Cybersecurity, or related field.· Master's degree preferred.Experience· 10+ years of overall IT experience.· 6+ years of hands-on SailPoint experience.· 3+ years in a Solution Architect or Lead Architect role.· Experience delivering large-scale IAM transformation programs.Technical Skills· SailPoint Identity Security Cloud (ISC)· Identity Governance and Administration (IGA)· Role-Based Access Control (RBAC)· Access Certification & Compliance· Provisioning & Lifecycle Management· Application Onboarding· REST APIs, SCIM, JDBC, LDAP· Active Directory, Azure AD/Entra ID· Java, BeanShell and SailPoint rule development· Cloud platforms (Azure, AWS, GCP)· ServiceNow integrationPreferred Certifications· SailPoint Certified Identity Security Cloud EngineerJob Level: ManagementAdditional InformationThe base compensation range for this role is: $140,000.00-$187,250.00Base salary offered is determined through an analytical approach utilizing a combination of factors including, but not limited to, relevant skills & experience, job location, and internal equity.Regular employees are eligible to receive both short term and long-term incentives, including cash bonus and equity incentive opportunities, designed to reward recent achievements and recognize your future potential based on individual, business unit and company performance. In addition to compensation, Biogen offers a full and highly competitive range of benefits designed to support our employees’ and their families physical, financial, emotional, and social well-being; including, but not limited to:Medical, Dental, Vision, & Life insurancesFitness & Wellness programs including a fitness reimbursement Short- and Long-Term Disability insuranceA minimum of 15 days of paid vacation and an additional end-of-year shutdown time off (Dec 26-Dec 31)Up to 12 company paid holidays + 3 paid days off for Personal Significance 80 hours of sick time per calendar yearPaid Maternity and Parental Leave benefit 401(k) program participation with company matched contributionsEmployee stock purchase plan Tuition reimbursement of up to $10,000 per calendar year Employee Resource Groups participationWhy Biogen?We are a global team with a commitment to excellence, and a pioneering spirit. As a mid-sized biotechnology company, we provide the stability and resources of a well-established business while fostering an environment where individual contributions make a significant impact. Our team encompasses some of the most talented and passionate achievers who have unparalleled opportunities for learning, growth, and expanding their skills. Above all, we work together to deliver life-changing medicines, with every role playing a vital part in our mission. Caring Deeply. Achieving Excellence. Changing Lives.At Biogen, we are committed to building on our culture of inclusion and belonging that reflects the communities where we operate and the patients we serve. We know that diverse backgrounds, cultures, and perspectives make us a stronger and more innovative company, and we are focused on building teams where every employee feels empowered and inspired. Read on to learn more about Biogen.All qualified applicants will receive consideration for employment without regard to sex, gender identity or expression, sexual orientation, marital status, race, color, national origin, ancestry, ethnicity, religion, age, veteran status, disability, genetic information or any other basis protected by federal, state or local law. Biogen is an E-Verify Employer in the United States.SummaryLocation: Cambridge, MA; Research Triangle Park, NCType: Full time