Senior Manager- Identity and Access Management

Role purpose

The Senior Manager, IAM leads delivery and continuous improvement of identity services that help protect Amgen’s people, information, systems, and operations. The role provides operational leadership across Provisioning and Identity Governance, Access Management, Directory Services, and Privileged Access Management (PAM), while partnering with global service owners, technology teams, business stakeholders, and strategic suppliers. The leader is accountable for reliable day-to-day services and for advancing the IAM strategy through secure, scalable, automated, and compliant capabilities. The position may requires working in US EST shifts, including occasional extended-hours coverage, to support global operations, critical incidents, and effective handovers across time zones.

The role combines service management, technical and architectural governance, risk reduction, transformation delivery, and people leadership. It operates in a global, highly regulated biopharmaceutical environment where availability, data protection, auditability, and business continuity are essential.

Primary function

Lead IAM operations and service delivery across multiple platforms. Set clear priorities for incident, problem, change, request, and compliance work; maintain service availability and agreed service levels; and ensure timely risk-based response to issues. Translate IAM strategy, policies, and control requirements into operational practices and technology outcomes. Build a strong team culture, develop talent, manage capacity, and strengthen collaboration across locations and functions.

Core responsibilities

IAM service operations and resilience

Lead operational delivery across identity provisioning and governance, access management, directory services, and PAM, coordinating work across India, the United States, Portugal, and suppliers as applicable.

Own service performance, operational health, availability, service-level objectives, backlogs, and capacity plans; review trends and take action before service or control risks grow.

Provide incident leadership for IAM service disruptions and security events: establish severity, coordinate responders, prioritize containment and recovery, communicate clearly, and engage business continuity and crisis teams when needed.

Oversee problem management and root-cause analysis. Ensure corrective and preventive actions are assigned, tracked, and reflected in runbooks, monitoring, architecture, and control improvements.

Govern operational changes, maintenance, release readiness, and supplier delivery to protect production stability and ensure adequate testing, rollback plans, and stakeholder readiness.

Maintain operational readiness through monitoring, alerting, service documentation, support models, knowledge transfer, and succession plans for critical systems and roles.

Identity strategy, platforms, and transformation

Execute the IAM roadmap and translate business, security, privacy, and regulatory needs into prioritized, supportable solutions and measurable outcomes.

Guide implementation, integration, migration, and modernization across IAM platforms, including IBM Security Identity Manager (ISIM), SailPoint Identity Security Cloud (ISC), Microsoft Entra, on-premises Active Directory, CyberArk, BeyondTrust Endpoint Privilege Management (Avecto), and Sectigo certificate services, as relevant to the environment.

Partner with enterprise architecture, application, infrastructure, cloud, network, endpoint, HR, and business teams to deliver secure identity patterns and resolve dependencies.

Provide technical and delivery assurance: review solution designs, operational readiness, integrations, test evidence, supportability, and adherence to architecture and security standards.

Contribute to identity lifecycle and governance for human, privileged, and non-human identities, including service accounts and other machine identities, in coordination with accountable security and platform owners.

Risk, compliance, and governance

Ensure IAM processes and platforms support applicable corporate policies, security controls, privacy requirements, and regulatory obligations in the biopharmaceutical environment.

Maintain audit-ready evidence for access governance, privileged access, change management, incident response, supplier oversight, and control operation; coordinate remediation of findings and control gaps.

Assess operational and technology risks, document decisions and exceptions, and prioritize mitigations according to business impact and risk appetite.

Ensure access is provisioned, changed, reviewed, and removed through authorized, traceable processes; strengthen segregation of duties and least-privilege practices.

Oversee supplier performance, deliverables, service levels, quality, and risk actions; clarify accountability between internal service owners and delivery partners.

Stakeholder leadership and communication

Build trusted relationships with global IAM service owners, cybersecurity leaders, business and application owners, control functions, and suppliers.

Communicate service health, material incidents, risks, decisions, dependencies, and recovery plans in a timely manner, tailoring detail to technical and executive audiences.

Facilitate cross-functional prioritization and resolve ownership or capacity conflicts with a focus on business outcomes and continuity.

Represent IAM operations in governance forums, audits, architecture reviews, and transformation steering discussions; present concise, evidence-based recommendations.

People management responsibilities

Provide clear direction, connect team priorities to organizational goals, role-model Amgen values, and create an environment where people can raise concerns and offer ideas.

Lead managers and individual contributors as applicable; establish regular 1:1s, team forums, skip-level conversations, and transparent communication of business context and organizational updates.

Monitor engagement and pulse feedback, agree measurable action plans with the team, and follow through. Promote inclusion, fairness, and equal opportunity.

Set clear goals and expectations; provide timely coaching and feedback; complete fair, well-differentiated performance evaluations and contribute constructively to calibration.

Build individual development plans aligned with strengths and career aspirations. Provide stretch assignments, technical learning, leadership development, and cross-functional exposure.

Address performance concerns promptly and consistently, partnering with HR and following company processes where formal action is needed.

Identify critical roles, key-person dependencies, succession options, and retention risks; develop bench strength and maintain continuity plans.

Forecast skills and capacity needs, define hiring profiles, participate in recruitment, and align staffing and supplier capacity with demand and budget.

Handle employee concerns and sensitive matters promptly, fairly, and confidentially, engaging HR and escalating appropriately.

Ensure people-management practices and records comply with company policy and support audit readiness and business continuity.

Qualifications and experience

Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related discipline; equivalent practical experience may be considered.

Typically 12+ years of experience in IAM, cybersecurity, infrastructure, or related technology functions, including substantial responsibility for enterprise IAM service delivery.

Several years of experience leading technical teams, managers, or multi-location delivery teams; experience managing service providers and global stakeholders.

Demonstrated experience running production IAM services and managing major incidents, problem management, operational risk, change, service levels, and audit or compliance activities.

Practical knowledge of enterprise identity lifecycle and governance, authentication and authorization, directory services, privileged access, access reviews, and IAM integrations.

Experience with several platforms relevant to the role, such as IBM ISIM, SailPoint ISC, Microsoft Entra, Active Directory, CyberArk, BeyondTrust EPM/Avecto, and Sectigo; depth in every named platform is not required.

Experience delivering IAM modernization, cloud adoption, migrations, workflow automation, or operational transformation at enterprise scale.

Ability to interpret security, privacy, and control requirements and turn them into clear technical and operational practices; regulated-industry experience is an advantage.

Strong written and verbal communication, sound judgment during incidents, structured problem-solving, and the ability to influence stakeholders without relying solely on authority.

Preferred qualifications

Experience in biopharmaceuticals, healthcare, life sciences, or another highly regulated global organization.

Relevant certifications such as CISSP, CISM, ITIL, or IAM platform certifications.

Familiarity with service management and delivery practices such as ITIL, Agile, or SAFe, and with operational metrics and continuous improvement.

Experience with cloud identity, non-human identity governance, secrets management, or identity-related automation.