Cyber Security Solution Architect – Identity & Access Management

Description

Cyber Security Solution Architect – Identity & Access Management (I&AM)

Please provide your CVs in English.

Syneos Health^® is a leading fully integrated biopharmaceutical solutions organization built to accelerate customer success. We translate unique clinical, medical affairs and commercial insights into outcomes to address modern market realities.

Every day we perform better because of how we work together, as one team, each the best at what we do. We bring a wide range of talented experts together across a wide range of business-critical services that support our business. Every role within Corporate is vital to furthering our vision of Shortening the Distance from Lab to Life®.

Discover what our 29,000 employees, across 110 countries already know: 
WORK HERE MATTERS EVERYWHERE

Why Syneos Health

• We are passionate about developing our people, through career development and progression; supportive and engaged line management; technical and therapeutic area training; peer recognition and total rewards program.
• We are committed to our Total Self culture – where you can authentically be yourself. Our Total Self culture is what unites us globally, and we are dedicated to taking care of our people. 
• We are continuously building the company we all want to work for and our customers want to work with. Why? Because when we bring together diversity of thoughts, backgrounds, cultures, and perspectives – we’re able to create a place where everyone feels like they belong.

The Cyber Security Solution Architect for Identity will be a member of the Office of the CISO organization and a member of enterprise security architects within the Resiliency and Response team.  This role is responsible for establishing an Identity & Access Management program and strategy to deliver architecture solutions to protect Syneos Health and support the company to bring and accelerate patient therapies to market. 

The Cyber Security Solution Architect will use a data driven and risk-based methodology to drive the governance and solutioning of Identity & Access Management (IAM) and zero-trust architecture, partnering with IT engineering and operational stakeholders. In addition, the role requires building cross-functional partnerships and deepen insights where security technology, platforms and applications can become more resilient to cyber-attacks through the adoption of enterprise IAM services.  The ability to comprehend technical and business implications to security directives and to make effective requirements will be very important in driving the success of modern security architecture adoption.

JOB RESPONSIBILITIES

1. Establish an IAM enterprise program and partner with stakeholders to deliver:

• Develop and operate KPI’s for IAM program.
• Enterprise strategy and architecture roadmap for multi-cloud platforms.
• Enterprise requirements for IAM within policies and standards.
• Demonstrate alignment to a zero-trust architecture.
• Solution end-to-end identity provisioning and deprovisioning.
• Create & drive adoption of secure authentication and authorization patterns.
• Aligning requirements to common cyber security frameworks such as NIST, Hitrust, CSF. 

2. Partner with application program teams to align and integrate with IAM roadmap: 

• Drive the creation & adoption of Privilege Access Management.
• Publish patterns to drive adoption of IAM services.
• Promote JIT assurance through solutions that are integrated into CI/CD pipelines.
• Promote and use cloud platform well-architected patterns for IAM. 

3. Educate and drive engagement of modern IAM security architecture principles within the organization:  

• Be a transformation agent in promoting a modern security engineering mindset.
• Perform design reviews to identify security architecture flaws.

Qualifications

1. Architecture

§  7 years of experience with delivering Identity & Access Management Services & Programs.

§  5 years of experience engineering and architecting zero trust architectures for IAM for Oracle Cloud, AWS and Azure.

§  Strong familiarity Identity Assurance frameworks.

§  Deep understanding on implementing enterprise IAM capabilities and tools:

• Microsoft IAM Services.
• Single Sign On (SSO) and Multifactor Authentication (MFA).
• Privileged Access Management (PAM).
• Automating provision and deprovisioning users.
• Identity Federation (Eg: SAML, SWT, JWT).
• Access Management & Directory Services (eg: Saviynt, Entra, Oracle IAM).
• Authentication and authorization mechanisms (eg: SAML & OAUTH).
•  Designing and building RBAC.

§  Implementing Zero Trust architectures and Service Oriented Architectures

2. Engineering

§  Experience designing and developing enterprise IAM solutions.

§  Understanding IAM related attacks and how they are exploited.

§  Experience with agile software development, processes, and tools.

§  Experience with implementing security engineering practices such as Security and Privacy by design within large scale methodologies. 

3. Education.

§  College degree or 5 years of experience as a security engineer or 7 as an enterprise security architect.

§  Vendor IAM certifications for enterprise solutions

§  Cloud Certification for OCI, AWS or Azure (Azure preferred)

4. Languages:

§ Proficiency in English both spoken and written is essential.