Cybersecurity Identity and Access Management Architect

Boston Scientific • Arden Hills, MN

9h • $85,000 - $161,500 • Hybrid

About The Position

At Boston Scientific, cybersecurity is more than protecting systems. It is about enabling trust, safeguarding patient data, supporting regulatory compliance and protecting the technologies that help improve and save lives. We are seeking a Cybersecurity Identity & Access Management Architect (IAM), to lead the strategy, architecture and evolution of enterprise identity security capabilities across our global medical device organization. In this architecture role, you will define and mature enterprise identity security capabilities across identity governance and administration (IGA), privileged access management (PAM), authentication, federation, secrets management, public key infrastructure (PKI), directory services and non-human identities. You will combine deep technical expertise with strong business judgment, regulatory knowledge and the ability to influence enterprise strategy. Identity is a critical security perimeter. In this role, you will help drive Zero Trust adoption, strengthen privileged access and identity governance, reduce cybersecurity risk, and enable compliant and resilient business growth. You will collaborate across Cybersecurity, Infrastructure, Cloud, Manufacturing, Enterprise Architecture, Product Security, Quality, Privacy, Regulatory Affairs and other business teams.

Requirements

• Bachelor’s degree in cybersecurity, computer science, information technology, engineering or a related field, or equivalent practical experience.
• Minimum of 7 years’ experience in cybersecurity, identity, engineering or security architecture.
• Minimum of seven years’ experience designing, implementing or governing enterprise IAM capabilities.
• Experience leading architecture workstreams, advising cross-functional teams and translating complex security requirements into practical, scalable solutions.
• Experience working in a highly regulated industry, such as medical devices, health care, life sciences, pharmaceuticals or manufacturing.
• Deep knowledge of identity governance, identity lifecycle management, access certification, role-based access control (RBAC), attribute-based access control (ABAC), segregation of duties and privileged access controls.
• Expertise in Security Assertion Markup Language (SAML), OAuth 2.0, OpenID Connect, SSO, MFA, adaptive access, Zero Trust, and secure cloud and hybrid identity architecture patterns.
• Experience with secrets management, service and machine identities, PKI, certificate lifecycle management, cryptographic key management, Active Directory and Microsoft Entra ID.
• Demonstrated skills in architecture documentation, threat modeling, risk assessment, security control design, metrics and remediation prioritization.

Nice To Haves

• Proven hands-on experience with enterprise identity and security platforms such as Saviynt or SailPoint; CyberArk, BeyondTrust or Delinea; Microsoft Entra ID, Active Directory, Okta or Ping Identity; HashiCorp Vault; and Microsoft Azure or Amazon Web Services (AWS).
• Relevant professional certifications, such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Cloud Security Professional (CCSP), TOGAF, SABSA or ISO/IEC 27001 credentials, or vendor-specific identity and cloud certifications.
• Demonstrated ability to influence senior stakeholders, navigate complex global organizations and translate cybersecurity risk into clear business recommendations.
• Proven experience developing enterprise IAM roadmaps and advancing identity security capabilities within large, complex or global environments.

Responsibilities

• Define and drive the enterprise IAM strategy, architecture, standards, governance and multiyear roadmap.
• Design and guide scalable enterprise capabilities for IGA, PAM, single sign-on (SSO), multifactor authentication (MFA), federation, secrets management, PKI, directory services, cloud identity and non-human identities.
• Lead architecture reviews, modernization initiatives, design workshops and complex cross-functional workstreams.
• Lead identity threat modeling, risk assessments, maturity reviews and gap analyses, and develop prioritized remediation roadmaps.
• Align identity controls with applicable cybersecurity, privacy and regulatory frameworks and requirements, including NIST Cybersecurity Framework, NIST SP 800-53, NIST SP 800-63, NIST SP 800-207, ISO/IEC 27001, GDPR, FDA guidance, SOX and internal requirements.
• Partner with Audit, Privacy, Regulatory Affairs, Quality, Governance, Risk and Compliance (GRC), and technology teams on control design, audit readiness and remediation.
• Define meaningful IAM risk metrics, key performance indicators (KPIs) and objectives and key results (OKRs), and communicate recommendations, investment needs, risks and outcomes to leadership.
• Evaluate emerging identity and cybersecurity technologies and recommend solutions that advance enterprise security capabilities and business objectives.
• Mentor architects, engineers, analysts and product teams on secure-by-design practices and identity security architecture.
• Partner across Cybersecurity, Infrastructure, Cloud, Manufacturing, Enterprise Architecture, Product Security, Quality, Privacy, Regulatory Affairs and other business functions to embed identity security into enterprise technology strategies and solutions.

Benefits

• The anticipated compensation listed above and the value of core and optional employee benefits offered by Boston Scientific (BSC) – see www.bscbenefitsconnect.com—will vary based on actual location of the position and other pertinent factors considered in determining actual compensation for the role.
• Compensation will be commensurate with demonstrable level of experience and training, pertinent education including licensure and certifications, among other relevant business or organizational needs.
• At BSC, it is not typical for an individual to be hired near the bottom or top of the anticipated salary range listed above.
• Compensation for non-exempt (hourly), non-sales roles may also include variable compensation from time to time (e.g., any overtime and shift differential) and annual bonus target (subject to plan eligibility and other requirements).
• Compensation for exempt, non-sales roles may also include variable compensation, i.e., annual bonus target and long-term incentives (subject to plan eligibility and other requirements).

What This Job Offers

• Job Type: Full-time
• Career Level: Senior