Sr. Manager - IT

Genetix Biotherapeutics•Somerville, MA

2d•$170,000 - $185,000•Hybrid

About The Position

The Senior Manager, IT owns the day-to-day delivery of the security and infrastructure services that support Genetix’s commercial products. This hands-on leader will oversee identity, endpoint, backup and recovery, network, and cloud operations during active modernization, including moving identity services toward Microsoft Entra, rebuilding backup and disaster recovery, and hardening corporate and laboratory environments. The role leads projects through change control in a validated, regulated environment, manages vendors, and develops a secure, auditable, and reliable team and operating rhythm. The position is based in Somerville, Massachusetts, with a hybrid schedule of three days onsite per week. Candidates must live within commuting distance of Somerville. The role supports validated systems, laboratory and commercial operations, audits, and customer and partner security requirements.

Requirements

Bachelor’s degree in IT, Computer Science, Information Security, or a related field, or equivalent practical experience.
At least 8 years of experience in IT infrastructure, security operations, or systems engineering, including at least 3 years leading people or technical teams.
Hands-on experience with Microsoft Entra ID and hybrid Active Directory, including conditional access, MFA, PIM, and service-account governance.
Hands-on experience with endpoint management (Intune), disk encryption, patching, and vulnerability management.
Experience with backup and recovery platforms, cloud networking, firewalls and VPN, and Microsoft 365.
Experience managing projects through formal change control and managing vendors.
Experience supporting audits or compliance programs in a regulated environment.
Working knowledge of AI tools such as Claude or similar tools applied to operations.
Strong communication skills, risk-based decision-making, and ability to prioritize competing demands in a small, fast-moving team.

Nice To Haves

Experience with Okta or another SSO platform.
Biotech, pharma, or GxP experience, including computer system validation and support for laboratory systems and instrumentation.
Experience modernizing hybrid environments, including identity-provider migrations, GPO-to-Intune migration, monitoring replacement, and legacy domain consolidation.
Security or infrastructure certifications such as CISSP, CISM, Security+, AWS Security Specialty, or Microsoft identity/security certifications.
Experience at a company rebuilding or scaling its IT function.

Responsibilities

Lead identity modernization across Microsoft Entra ID, Okta, and hybrid Active Directory, including business application SSO migrations, conditional access, MFA coverage, and authentication policy.
Own privileged access management, including PIM, admin role reduction, service-account de-privileging and lifecycle management, and stale-account cleanup.
Run access governance and least-privilege role design for business applications, and ensure timely provisioning and deprovisioning for employees, contractors, consultants, and managed service providers.
Manage the Active Directory security backlog, Entra Connect directory synchronization health, and Group Policy migration to Intune.
Operate core infrastructure, including AWS multi-account environments, federated access, networking, on-premises and virtualized servers, firewalls, VPN, and legacy file services.
Build and operate backup and recovery, including platform deployment, network paths to cloud targets, restore testing, retention, and data archiving.
Lead OS and application patching, server and client end-of-life planning, and scheduled outage coordination.
Manage DNS and domain hygiene, including verification and decommissioned records and legacy domain consolidation.
Lead monitoring and observability, including tool replacement and alerting linked to incident response.
Own endpoint and laboratory security, including disk encryption and Secure Boot compliance, endpoint management, DNS-layer protection, patch policies, and removal of retired tools.
Triage security reports, including phishing submissions and external vulnerability disclosures, and manage response through closure.
Support audits and customer or partner security assessments, including GxP, 21 CFR Part 11, SOX, and SOC 2 questionnaires, evidence collection, and remediation tracking.
Partner with Quality and application owners on infrastructure for validated systems, including LIMS/ELN, statistical computing, and laboratory instruments; support server builds, security hot fixes, non-production testing, regression sign-off, and change control.
Support commercial and partner-facing systems and treatment-center security and connectivity requirements.
Lead, coach, and develop engineers and analysts; set priorities and manage workload across projects and service requests.
Manage managed service providers and vendors, including SLAs, contracts, performance, and escalation.
Define SLAs and reporting for security and infrastructure requests, and improve service-desk intake, approval, and onboarding workflows.
Write runbooks, SOPs, and change records to make operations repeatable and audit-ready.
Apply AI tools such as Claude in daily work, including integrations with enterprise systems, and champion responsible adoption with appropriate access controls.