Note: The job is a remote job and is open to candidates in USA. Pfizer’s Identity Security and Access Management organization delivers secure, scalable identity solutions across enterprise platforms and identity types. The Senior Manager of Authentication will lead the strategy, architecture, implementation, and operational management of enterprise authentication services, including SSO, MFA, passwordless authentication, federation, and identity security initiatives.
Responsibilities
- Strategy & Leadership: Develop and execute a comprehensive Authentication strategy to ensure secure and user-friendly access across all enterprise applications and platforms. Drive SSO adoption and improve the overall identity management ecosystem
- SSO / MFA Architecture & Design: Oversee the design, implementation, and ongoing optimization of the SSO / MFA framework. Ensure it is scalable, resilient, and integrated with both internal and third-party services, including cloud-based applications
- Cross-Functional Collaboration: Work closely with cross-functional teams including IT, security, development, and product teams to ensure seamless integration of SSO & MFA capabilities into new and existing platforms. Provide guidance on best practices for secure access management
- Security & Compliance: Maintain a strong understanding of security protocols and compliance standards (e.g., GDPR, HIPAA, NIST) and ensure that SSO solutions align with relevant regulations and industry standards. Lead the development and implementation of security controls related to authentication and authorization
- Vendor & Tool Selection: Evaluate and select appropriate identity management tools, including SSO solutions, Multi-Factor Authentication (MFA), and Identity Federation. Manage relationships with vendors and third-party providers, ensuring successful product implementation and ongoing support
- Incident Management & Troubleshooting: Lead the team in investigating and resolving any issues related to SSO / MFA functionality. Ensure that incidents are managed efficiently, and improvements are implemented to minimize future disruptions
- User Experience Focus: Ensure that SSO implementation improves the end-user experience by simplifying login processes while maintaining high-security standards. Work on reducing friction points and increasing user adoption
- Metrics & Reporting: Help develop key performance indicators (KPIs) for SSO performance and security metrics. Regularly report on SSO effectiveness, user engagement, security breaches, and other relevant metrics
Skills
- Bachelor's degree in relevant discipline
- 6+ years of experience in identity and access management, with at least 4 years focused on Single Sign-On (SSO) solutions. Strong background in IT security, authentication protocols, and IAM frameworks supporting SSO with greater than 50,000 users
- Deep understanding of SSO technologies (e.g., SAML, OAuth, OpenID Connect) and experience with identity federation, multi-factor authentication (MFA), and cloud-based IAM solutions. Knowledge of identity providers like Okta, Azure AD, or Ping Identity
- Able to solve highly complex authentication and authorization problems within a Global environment
- Strong understanding of security best practices related to identity management, including encryption, tokenization, and secure protocols
- Experience in leading IAM system support, engineering, and operations teams within a Global Business Unit
- Understanding of applicable laws and regulations including Sarbanes-Oxley (SOX) and GXP quality regulations and guidelines
- Holds relevant stakeholders and project teams accountable and have a proven track record of successfully managing and executing on long term complex projects
- Demonstrated experience in an agile work environment possessing qualities such as a collaborative mindset, adaptability to change, and a proactive problem-solving approach
- Candidate demonstrates a breadth of diverse leadership experiences and capabilities including: the ability to influence and collaborate with peers, develop and coach others, oversee and guide the work of other colleagues to achieve meaningful outcomes and create business impact
- Periodic international and domestic travel required (less than 10%)
- Work Location Assignment: Hybrid. Must be able to work from assigned Pfizer office 2-3 days per week, or as needed by the business
- Candidates must be authorized to be employed in the U.S. by any employer
- This position requires permanent work authorization in the United States
- Applicants should be capable of working through a personal laptop computer or mobile device for extended periods
- Master's degree in relevant discipline
- Deep expertise in Ping Identity solutions is highly desirable
Benefits
- Participation in Pfizer’s Global Performance Plan with a bonus target of 17.5% of the base salary
- Eligibility to participate in Pfizer’s share based long term incentive program
- 401(k) plan with Pfizer Matching Contributions
- Additional Pfizer Retirement Savings Contribution
- Paid vacation, holiday and personal days
- Paid caregiver/parental and medical leave
- Health benefits including medical, prescription drug, dental and vision coverage
- Hybrid work arrangement: work from the assigned Pfizer office 2-3 days per week, or as needed by the business
- Relocation assistance may be available based on business needs and/or eligibility
Company Overview