Sr. Manager - IT

Genetix Biotherapeutics•Somerville, MA

2d•Hybrid

About The Position

The Senior Manager, IT owns day-to-day delivery of the security and infrastructure services supporting Genetix Biotherapeutics’ commercial products. This hands-on leadership role oversees identity, endpoint, backup and recovery, network, and cloud operations while the company modernizes its environment. Current initiatives include moving identity services toward Microsoft Entra, rebuilding backup and disaster recovery, and strengthening corporate and laboratory security. The role manages projects through formal change control in a validated, regulated environment, oversees vendors, and develops a team and operating practices that are secure, auditable, and reliable. The position is based in Somerville, Massachusetts, with a hybrid schedule of three days onsite each week. Candidates must live within commuting distance of Somerville.

Requirements

Bachelor’s degree in IT, Computer Science, Information Security, or a related field, or equivalent practical experience.
At least 8 years of experience in IT infrastructure, security operations, or systems engineering.
At least 3 years leading people or technical teams.
Hands-on experience with Entra ID and hybrid Active Directory, including conditional access, MFA, PIM, and service account governance.
Hands-on experience with endpoint management (Intune), disk encryption, patching, and vulnerability management.
Experience with backup and recovery platforms, cloud networking, firewalls and VPN, and Microsoft 365.
Experience managing projects through formal change control and managing vendors.
Experience supporting audits or compliance programs in a regulated environment.
Working knowledge of AI tools such as Claude or similar applied to operations.
Strong communication skills, risk-based decision-making ability, and ability to prioritize competing demands in a small, fast-moving team.

Nice To Haves

Experience with Okta or another SSO platform.
Biotech, pharma, or GxP experience, including computer system validation and support for laboratory systems and instrumentation.
Experience modernizing hybrid environments, including identity provider migrations, GPO-to-Intune migrations, monitoring replacement, and legacy domain consolidation.
Security or infrastructure certifications such as CISSP, CISM, Security+, AWS Security Specialty, or Microsoft identity/security certifications.
Experience in a company rebuilding or scaling its IT function.

Responsibilities

Lead identity modernization across Microsoft Entra ID, Okta, and hybrid Active Directory, including business application SSO migrations, conditional access, MFA coverage, and authentication policy.
Own privileged access management, including PIM, admin role reduction, service account governance and lifecycle, and stale account cleanup.
Run access governance and least-privilege role design for business applications, ensuring timely provisioning and deprovisioning for employees, contractors, consultants, and managed service providers.
Manage the Active Directory security backlog, Entra Connect directory sync health, and Group Policy migration to Intune.
Operate core infrastructure, including AWS multi-account environments, federated access, networking, on-premises and virtualized servers, firewalls, VPN, and legacy file services.
Build and operate backup and recovery capabilities, including platform deployment, cloud-target network paths, restore testing, retention, and data archiving.
Lead operating system and application patching, server and client lifecycle management, and scheduled outage coordination.
Manage DNS and domain hygiene, including verification records, decommissioned records, and legacy domain consolidation.
Lead monitoring and observability, including tool replacement and incident-response-linked alerting.
Own endpoint and laboratory security, including disk encryption and Secure Boot compliance, endpoint management, DNS-layer protection, patch policies, and removal of retired tools.
Own intake and triage of security reports, including phishing submissions and external vulnerability disclosures, and ensure defined response and closure.
Support audits and customer or partner security assessments, including GxP, 21 CFR Part 11, SOX, and SOC 2 questionnaires, evidence collection, and remediation tracking.
Partner with Quality and application owners on infrastructure for validated systems, including LIMS/ELN, statistical computing, and laboratory instruments; support server builds, security hot fixes, non-production testing, regression sign-off, and change control.
Support commercial and partner-facing systems and treatment center security and connectivity requirements.
Lead, coach, and develop engineers and analysts; set priorities and manage workload across projects and service requests.
Manage managed service providers and vendors, including SLAs, contracts, performance, and escalation.
Define SLAs and reporting for security and infrastructure requests, and improve intake, approval, and onboarding workflows with the service desk.
Write runbooks, SOPs, and change records to make operations repeatable and audit-ready.
Use AI tools such as Claude in daily work, including integrations with enterprise systems, and champion responsible AI adoption with appropriate access controls.