Principal IS Architect

### **Career Category**

Information Systems

### **Job Description**

**Join Amgen’s Mission of Serving Patients**

At Amgen, if you feel like you’re part of something bigger, it’s because you are. Our shared mission—to serve patients living with serious illnesses—drives all that we do.

Since 1980, we’ve helped pioneer the world of biotech in our fight against the world’s toughest diseases. Amgen is advancing a broad and deep pipeline and portfolio of medicines to treat heart disease, obesity and obesity-related conditions, rare diseases, inflammatory conditions and cancer.  As a member of the Amgen team, you’ll help make a lasting impact on the lives of patients as we research, manufacture, and deliver innovative medicines to help people live longer, fuller happier lives.

Our award-winning culture is collaborative, innovative, and science based. If you have a passion for challenges and the opportunities that lay within them, you’ll thrive as part of the Amgen team. Join us and transform the lives of patients while transforming your career.

**Principal IS Architect**

**What you will do**

Let’s do this. Let’s change the world. Amgen is seeking a Principal Information Systems (IS) Architect to join Amgen’s Digital Identity and Access Services team and will lead the design, integration, and support of Amgen’s identity provisioning and entitlement management environment, as well as related identity-based technologies (e.g. password synchronization, identity attribute management, single sign on, multi-factor authentication, group automation, etc.).

The Principal IS Architect will report to the Sr. Director Information Security based out of Amgen’s Capability Center in Tampa, FL. At Amgen, our mission is simple: to serve patients. Our Tampa Capability Center provides essential services that enable us to better pursue this mission. This state-of-the-art center serves as a base for finance, information systems, and human resources professionals to make a meaningful impact at one of the world’s leading biotechnology companies.

Identity Management at Amgen is a core group responsible for handling all the enterprise directories, identity provisioning and access management/ governance solutions, single sign-on tools, privileged identity management, PKI and other authentication platforms. This team is at the fore-front of enterprise architecture and security at Amgen and is passionate about providing solutions with great end user experience.

**Responsibilities:**

- Provide technical and governance oversight to all IdM projects. Serve as the technical architect in the analysis, design and implementation of all IdM related projects and be responsible for their successful delivery while meeting the overall security and integrity of the solution. There is also a need to work with project teams to provide insights about architectural standards and information security standard methodologies.
- Lead the architecture and integration of enterprise secrets-management and non-human identity capabilities. Establish patterns for managing service accounts, application identities, API keys, tokens, certificates, and other secrets across cloud, data, and enterprise platforms. Partner with platform and application teams to implement solutions that meet Amgen security standards and integrate with enterprise IAM.
- Provide leadership and day to day operational management, participate in troubleshooting sessions, manage and handle critical issues, guide and lead disaster recovery exercises, plan continuous process improvement, coordinate and handle budgets for staff and other org specific functions/services.
- Management and implementation of technologies and processes relating to assigned Cybersecurity & Digital Trust capability including issue identification and resolution, integration with other tools, documentation, gap assessment, gap resolution and continuous improvement of the capability.
- Develop or participate in the development of business cases and presentations on information security technologies of interest to Amgen.
- Advise project teams, application owners, and other Information Security teams on information security controls.
- Support Incident Response on security incidents including chipping into mock security incident exercises.
- Perform security design consulting in support of projects including participation in security architecture reviews as necessary.
- Provide mentorship and training on areas of expertise to Cybersecurity & Digital Trust and Amgen teams.
- Participate in departmental compliance (legal, regulatory, and contractual) as needed.
- This position requires after hours responsibilities and may require travel up to 15%.

**What we expect of you**

We are all different, yet we all use our unique contributions to serve patients. The professional we seek is an individual with these qualifications.

**Basic Qualifications:**

Doctorate degree and 2 years of Information Systems and/or Computer Science experience

OR

Master’s degree and 4 years of Information Systems and/or Computer Science experience

OR

Bachelor’s degree and 6 years of Information Systems and/or Computer Science experience

OR

Associate’s degree and 10 years of Information Systems and/or Computer Science experience

OR

High school diploma / GED and 12 years of Information Systems and/or Computer Science experience

**Preferred Qualifications:**

- Knowledge of Web Access Management and SSO technologies (Entra ID, Okta, Azure, Ping Federate, SAML, OAuth, and OpenID/Connect).
- Knowledge of Microsoft Active Directory skills including AD LDS and Azure AD.
- Knowledge of LDAP directories, PKI (Public Key Infrastructure).
- Comprehensive experience with Amazon AWS and/or Microsoft Azure as well as understanding of Identity and Access Management.
- Working knowledge of networking concepts and protocols, LAN, WAN, SSL, Firewall, Load Balancer, and DMZ configurations.
- Knowledge of Identity and Access and Role Management applications (IBM ISIM, IBM IGI, Sailpoint IdentityIIQ, Microsoft Identity Manager, Liberman Red Identity Manager, Azure and Microsoft B2B solution).
- Experience designing or operating enterprise secrets-management solutions, such as HashiCorp Vault or cloud-native services such as AWS Secrets Manager and Azure Key Vault.
- Experience managing non-human identities and credentials, including service accounts, service principals, API keys, tokens, certificates, and secrets used by applications and automation.
- Knowledge of workload identity, federation, short-lived credentials, automated secret discovery and rotation, and secure integration with CI/CD pipelines and cloud platforms.
- Ability to define and implement secrets-management governance, including ownership, access controls, auditability, rotation, expiration, and incident response.
- Experience with mobile device authentication and management.
- Scripting skills such as PowerShell, Perl, VB Script, etc.
- Effective working with global teams.
- Successful management of multiple priorities.
- Collaborative, placing priority on the successful completion of team goals.
- Military experience.

One or more of the following certifications, including but not limited to:

- Certified Information Security Manager (CISM)
- CompTIA Security+
- Certified Information Systems Security Professional (CISSP)
- SANS Global Information Assurance Certifications (GIAC)

**What you can expect of us**

As we work to develop treatments that take care of others, we also work to care for your professional and personal growth and well-being. From our competitive benefits to our collaborative culture, we’ll support your journey every step of the way.

The expected annual salary range for this role in the U.S. (excluding Puerto Rico) is posted. Actual salary will vary based on several factors including but not limited to, relevant skills, experience, and qualifications.

In addition to the base salary, Amgen offers a Total Rewards Plan, based on eligibility, comprising of health and welfare plans for staff and eligible dependents, financial plans with opportunities to save towards retirement or other goals, work/life balance, and career development opportunities that may include:

- A comprehensive employee benefits package, including a Retirement and Savings Plan with generous company contributions, group medical, dental and vision coverage, life and disability insurance, and flexible spending accounts
- A discretionary annual bonus program, or for field sales representatives, a sales-based incentive plan
- Stock-based long-term incentives
- Award-winning time-off plans
- Flexible work models where possible. Refer to the Work Location Type in the job posting to see if this applies

Apply now and make a lasting impact with the Amgen team.

**careers.amgen.com**

In any materials you submit, you may redact or remove age-identifying information such as age, date of birth, or dates of school attendance or graduation. You will not be penalized for redacting or removing this information.

**Application deadline**

Amgen does not have an application deadline for this position; we will continue accepting applications until we receive a sufficient number or select a candidate for the position.

**Sponsorship**

Sponsorship for this role is not guaranteed.

As an organization dedicated to improving the quality of life for people around the world, Amgen fosters an inclusive environment of ethical, committed and highly accomplished people who respect each other and live the Amgen values to continue advancing science to serve patients. Together, we compete in the fight against serious disease.

Amgen is an Equal Opportunity employer. We make all employment decisions without regard to race, color, religion, sex or any other characteristic protected by applicable law.

We provide reasonable accommodations to applicants and employees with disabilities, consistent with legal requirements. Please contact us to request accommodation.

.

**Salary Range**

144,423.50USD -195,396.50 USD