Sr. Staff Security Architect, Identity and Endpoints

Work Schedule

Standard (Mon-Fri)

Environmental Conditions

Office

Job Description

When you join us at Thermo Fisher Scientific, you’ll be part of an inquisitive team that shares your passion for exploration and discovery. With revenues of more than $40 billion and the largest investment in R&D in the industry, we give our people the resources and chances to create significant contributions to the world.
 

Location/Division Specific Information

This position is in the Cybersecurity Architecture team within Corporate Infrastructure & Security (CIS).
 

Discover Impactful Work:

As a Sr. Staff Security Architect, you’ll be a part of our global Cybersecurity Architecture team, responsible for overall enterprise security architecture and security solutions architecture. Your main focus areas are various aspects of identity security and protection, combined with endpoint security solutions providing detection, prevention, and response capabilities and related configuration management.
 

A day in the Life:

• Architect security solutions for identity management across all aspects of a hybrid cloud environment; administrative access, user access and key management within multiple cloud and on-premises environments.
• Work with our endpoint security solutioning to enhance our endpoint security tooling, technologies and related processes.
• Proactively identify and prioritize corporate security risk and present solutions to advise our leadership to make informed decisions and maintain a strong security posture within the identity security and protection realm.
• Continuously improve visibility and anomaly detection, define and implement processes to ensure appropriate actions are taken from findings.
• Continually identify new technologies, methods, and procedures for enhancing the security program.
• Partner with architects and engineers across the company to ensure solutions are in line with corporate strategy.

Keys to Success:

• Ability to explain technical details to IT and business leadership with a focus on encouraging technical changes or investment where appropriate.
• Demonstrated ability to define clear documentation and processes, ensuring engineered solutions are well defined and repeatable.
• Deep hands-on experience with all aspects of identity & access management along with identity lifecycle management, including SSO solutions, Active Directory, Entra ID, PKI and device identities.
• Experience with identity management for public and private cloud environments, including key and secret management for identities used by applications and services.
• Proficiency in programming, automation, and API development, including expertise in API access management.
• Deep understanding of endpoint protection technologies, tools and security policies.
   

Education

• Bachelor's Degree in cybersecurity, computer science, or related field. Equivalent work experience is accepted.
• Certifications not required, but encouraged: CISSP, or other security-related certifications a plus.
   

Experience

• 7+ years of hands-on experience maintaining, managing and designing multiple identity management solutions in varying states of solution maturity.
• Demonstration of progressive roles with focus on IAM solutions such as Active Directory, Virtual Directory Solutions, SSO, MFA, PAM, Secrets Management and PKI.
• Hands-on experience with endpoint security solutions, endpoint configuration management and related industry standards.
• Experience in automation tools and scription languages such as Python and PowerShell.
   

Knowledge, Skills, Abilities

• Strong proactive analytical and problem-solving skills in both ambiguous and tactical situations with a bias for action.
• Ability to act both independently and as a part of a team.
• Excellent written and verbal communication skills.
• Dedication to excellence, high-quality standards, and attention to detail.
   

Benefits

We offer competitive remuneration, annual incentive plan bonus, healthcare, and a range of employee benefits. Thermo Fisher Scientific offers employment with an innovative, forward-thinking organization, and outstanding career and development prospects. We offer an exciting company culture that stands for integrity, intensity, involvement, and innovation!

Our Mission is to enable our customers to make the world healthier, cleaner and safer. Watch as our colleagues explain 5 reasons to work with us. As one team of 100,000+ colleagues, we share a common set of values - Integrity, Intensity, Innovation and Involvement - working together to accelerate research, solve complex scientific challenges, drive technological innovation and support patients in need. #StartYourStory at Thermo Fisher Scientific, where diverse experiences, backgrounds and perspectives are valued.
 

Apply today! http://jobs.thermofisher.com
 

Thermo Fisher Scientific is an EEO/Affirmative Action Employer and does not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability or any other legally protected status.

We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.
 

Accessibility/Disability Access

Job Seekers with a Disability: Thermo Fisher Scientific offers accessibility service for job seekers requiring accommodations in the job application process. For example, this may include individuals requiring assistance because of hearing, vision, mobility, or cognitive impairments. If you are a job seeker with a disability, or assisting a person with a disability, and require accessibility assistance or an accommodation to apply for one of our jobs, please submit a request by telephone at 1-855-471-2255*. Please include your contact information and specific details about your required accommodation to support you during the job application process.

*This telephone line is reserved solely for job seekers with disabilities requiring accessibility assistance or an accommodation in the job application process. Messages left for other purposes, such as not being able to get into the career website, following up on an application, or other non-disability related technical issues will not receive a response.