Principal IS Architect

Career Category Information Systems Job Description Join Amgen’s Mission of Serving Patients At Amgen, if you feel like you’re part of something bigger, it’s because you are. Our shared mission—to serve patients living with serious illnesses—drives all that we do. Since 1980, we’ve helped pioneer the world of biotech in our fight against the world’s toughest diseases. Amgen is advancing a broad and deep pipeline and portfolio of medicines to treat heart disease, obesity and obesity-related conditions, rare diseases, inflammatory conditions and cancer. As a member of the Amgen team, you’ll help make a lasting impact on the lives of patients as we research, manufacture, and deliver innovative medicines to help people live longer, fuller happier lives. Our award-winning culture is collaborative, innovative, and science based. If you have a passion for challenges and the opportunities that lay within them, you’ll thrive as part of the Amgen team. Join us and transform the lives of patients while transforming your career. Principal IS Architect What you will do Let’s do this. Let’s change the world. Amgen is seeking a Principal Information Systems (IS) Architect to join Amgen’s Digital Identity and Access Services team and will lead the design, integration, and support of Amgen’s identity provisioning and entitlement management environment, as well as related identity-based technologies (e.g. password synchronization, identity attribute management, single sign on, multi-factor authentication, group automation, etc.). The Principal IS Architect will report to the Sr. Director Information Security based out of Amgen’s Capability Center in Tampa, FL. At Amgen, our mission is simple: to serve patients. Our Tampa Capability Center provides essential services that enable us to better pursue this mission. This state-of-the-art center serves as a base for finance, information systems, and human resources professionals to make a meaningful impact at one of the world’s leading biotechnology companies. Identity Management at Amgen is a core group responsible for handling all the enterprise directories, identity provisioning and access management/ governance solutions, single sign-on tools, privileged identity management, PKI and other authentication platforms. This team is at the fore-front of enterprise architecture and security at Amgen and is passionate about providing solutions with great end user experience. Responsibilities: Provide technical and governance oversight to all IdM projects. Serve as the technical architect in the analysis, design and implementation of all IdM related projects and be responsible for their successful delivery while meeting the overall security and integrity of the solution. There is also a need to work with project teams to provide insights about architectural standards and information security standard methodologies. Lead the architecture and integration of enterprise secrets-management and non-human identity capabilities. Establish patterns for managing service accounts, application identities, API keys, tokens, certificates, and other secrets across cloud, data, and enterprise platforms. Partner with platform and application teams to implement solutions that meet Amgen security standards and integrate with enterprise IAM. Provide leadership and day to day operational management, participate in troubleshooting sessions, manage and handle critical issues, guide and lead disaster recovery exercises, plan continuous process improvement, coordinate and handle budgets for staff and other org specific functions/services. Management and implementation of technologies and processes relating to assigned Cybersecurity & Digital Trust capability including issue identification and resolution, integration with other tools, documentation, gap assessment, gap resolution and continuous improvement of the capability. Develop or participate in the development of business cases and presentations on information security technologies of interest to Amgen. Advise project teams, application owners, and other Information Security teams on information security controls. Support Incident Response on security incidents including chipping into mock security incident exercises. Perform security design consulting in support of projects including participation in security architecture reviews as necessary. Provide mentorship and training on areas of expertise to Cybersecurity & Digital Trust and Amgen teams. Participate in departmental compliance (legal, regulatory, and contractual) as needed. This position requires after hours responsibilities and may require travel up to 15%. What we expect of you We are all different, yet we all use our unique contributions to serve patients. The professional we seek is an individual with these qualifications. Basic Qualifications: Doctorate degree and 2 years of Information Systems and/or Computer Science experience OR Master’s degree and 4 years of Information Systems and/or Computer Science experience OR Bachelor’s degree and 6 years of Information Systems and/or Computer Science experience OR Associate’s degree and 10 years of Information Systems and/or Computer Science experience OR High school diploma / GED and 12 years of Information Systems and/or Computer Science experience Preferred Qualifications: Knowledge of Web Access Management and SSO technologies (Entra ID, Okta, Azure, Ping Federate, SAML, OAuth, and OpenID/Connect). Knowledge of Microsoft Active Directory skills including AD LDS and Azure AD. Knowledge of LDAP directories, PKI (Public Key Infrastructure). Comprehensive experience with Amazon AWS and/or Microsoft Azure as well as understanding of Identity and Access Management. Working knowledge of networking concepts and protocols, LAN, WAN, SSL, Firewall, Load Balancer, and DMZ configurations. Knowledge of Identity and Access and Role Management applications (IBM ISIM, IBM IGI, Sailpoint IdentityIIQ, Microsoft Identity Manager, Liberman Red Identity Manager, Azure and Microsoft B2B solution). Experience designing or operating enterprise secrets-management solutions, such as HashiCorp Vault or cloud-native services such as AWS Secrets Manager and Azure Key Vault. Experience managing non-human identities and credentials, including service accounts, service principals, API keys, tokens, certificates, and secrets used by applications and automation. Knowledge of workload identity, federation, short-lived credentials, automated secret discovery and rotation, and secure integration with CI/CD pipelines and cloud platforms. Ability to define and implement secrets-management governance, including ownership, access controls, auditability, rotation, expiration, and incident response. Experience with mobile device authentication and management. Scripting skills such as PowerShell, Perl, VB Script, etc. Effective working with global teams. Successful management of multiple priorities. Collaborative, placing priority on the successful completion of team goals. Military experience. One or more of the following certifications, including but not limited to: Certified Information Security Manager (CISM) CompTIA Security&#43; Certified Information Systems Security Professional (CISSP) SANS Global Information Assurance Certifications (GIAC) What you can expect of us <