Sr. IT Solution Architect, Access Automation

Biogen•Cambridge, MA

3d•$140,000 - $187,250•Hybrid

About The Position

Biogen is seeking an experienced Solution Architect\Delivery Lead\ IT System Owner to lead the design, architecture, and implementation of enterprise Identity and Access Management (IAM) solutions using the SailPoint platform. The ideal candidate will possess strong expertise in IAM governance, access certification, role management, provisioning, application onboarding, and integration with enterprise systems. The position sits within Enterprise IT Services under the Enterprise Application Services organization and exists to strengthen Biogen’s access automation capabilities, application security, and GxP/Quality compliance programs by delivering scalable, secure, and well-governed identity governance solutions. The role translates business, security, and compliance requirements into technical architecture, implementation roadmaps, integrations, and operational processes. It partners closely with other areas within Enterprise IT Services, Cybersecurity, AMS, Infrastructure, application areas in other functions, IT Quality, and business teams to ensure access lifecycle, provisioning, certification, role management, and audit needs are met effectively. This is a hybrid role requiring on site presence 3 days per week in our offices. This position can be based in either Cambridge, MA or Research Triangle Park, NC . The pay range posted encompasses the pay range for both potential work locations. Actual pay will be determined by the selected candidate’s work location, as well as relevant experience and qualifications.

Requirements

Bachelor’s degree in computer science, Information Technology, Cybersecurity, or related field.
10+ years of overall IT experience.
6+ years of hands-on SailPoint experience.
3+ years in a Solution Architect or Lead Architect role.
Experience delivering large-scale IAM transformation programs.
SailPoint Identity Security Cloud (ISC)
Identity Governance and Administration (IGA)
Role-Based Access Control (RBAC)
Access Certification & Compliance
Provisioning & Lifecycle Management
Application Onboarding
REST APIs, SCIM, JDBC, LDAP
Active Directory, Azure AD/Entra ID
Java, BeanShell and SailPoint rule development
Cloud platforms (Azure, AWS, GCP)
ServiceNow integration

Nice To Haves

Master's degree preferred.
SailPoint Certified Identity Security Cloud Engineer

Responsibilities

Design & implement enterprise-wide Identity Governance and Administration (IGA) solutions using SailPoint Identity Security Cloud (ISC) and ServiceNow as a front end
Define IAM architecture, standards, and best practices aligned with security and compliance requirements.
Create high-level and low-level solution designs, architecture diagrams, and implementation roadmaps.
Evaluate business requirements and translate them into SailPoint technical solutions.
Lead SailPoint implementation projects from design through deployment.
Design and oversee integrations with: Active Directory, LDAP, HR systems (Workday, Fieldglass), ERP systems (Oracle), Cloud applications (ServiceNow, Salesforce, O365, etc.)
Design provisioning and de-provisioning workflows.
Configure access certifications, lifecycle events, role management, policy violations, and segregation of duties (SoD).
Provide technical leadership and guidance to IAM engineers, developers, and administrators.
Conduct architecture and design reviews.
Establish governance processes for identity lifecycle management.
Lead client workshops and requirements gathering sessions.
Mentor team members and promote IAM best practices.
Ensure solutions comply with regulatory requirements such as GxP, SOX.
Implement security controls, risk mitigation measures, and audit requirements.
Support internal and external audits related to identity management.
Work closely with business, security, infrastructure, and application teams.
Present architectural recommendations to senior leadership and clients.
Manage technical risks and project dependencies.

Benefits

Medical, Dental, Vision, & Life insurances
Fitness & Wellness programs including a fitness reimbursement
Short- and Long-Term Disability insurance
A minimum of 15 days of paid vacation and an additional end-of-year shutdown time off (Dec 26-Dec 31)
Up to 12 company paid holidays + 3 paid days off for Personal Significance
80 hours of sick time per calendar year
Paid Maternity and Parental Leave benefit
401(k) program participation with company matched contributions
Employee stock purchase plan
Tuition reimbursement of up to $10,000 per calendar year
Employee Resource Groups participation