Sr. IT Solution Architect, Access Automation

About This Role

Biogen is seeking an experienced Solution Architect\Delivery Lead\ IT System Owner to lead the design, architecture, and implementation of enterprise Identity and Access Management (IAM) solutions using the SailPoint platform. The ideal candidate will possess strong expertise in IAM governance, access certification, role management, provisioning, application onboarding, and integration with enterprise systems.

The position sits within Enterprise IT Services under the Enterprise Application Services organization and exists to strengthen Biogen’s access automation capabilities, application security, and GxP/Quality compliance programs by delivering scalable, secure, and well-governed identity governance solutions. The role translates business, security, and compliance requirements into technical architecture, implementation roadmaps, integrations, and operational processes. It partners closely with other areas within Enterprise IT Services, Cybersecurity, AMS, Infrastructure, application areas in other functions, IT Quality, and business teams to ensure access lifecycle, provisioning, certification, role management, and audit needs are met effectively.

This is a hybrid role requiring on site presence 3 days per week in our offices. This position can be based in either Cambridge, MA or Research Triangle Park, NC . The pay range posted encompasses the pay range for both potential work locations. Actual pay will be determined by the selected candidate’s work location, as well as relevant experience and qualifications.

What You’ll Do

Architecture & Solution Design

· Design & implement enterprise-wide Identity Governance and Administration (IGA) solutions using SailPoint Identity Security Cloud (ISC) and ServiceNow as a front end

· Define IAM architecture, standards, and best practices aligned with security and compliance requirements.

· Create high-level and low-level solution designs, architecture diagrams, and implementation roadmaps.

· Evaluate business requirements and translate them into SailPoint technical solutions.

Implementation & Integration

· Lead SailPoint implementation projects from design through deployment.

· Design and oversee integrations with:

• Active Directory
• LDAP
• HR systems (Workday, Fieldglass)
• ERP systems (Oracle)
• Cloud applications (ServiceNow, Salesforce, O365, etc.)

· Design provisioning and de-provisioning workflows.

· Configure access certifications, lifecycle events, role management, policy violations, and segregation of duties (SoD).

Leadership & Governance

· Provide technical leadership and guidance to IAM engineers, developers, and administrators.

· Conduct architecture and design reviews.

· Establish governance processes for identity lifecycle management.

· Lead client workshops and requirements gathering sessions.

· Mentor team members and promote IAM best practices.

Security & Compliance

· Ensure solutions comply with regulatory requirements such as GxP, SOX.

· Implement security controls, risk mitigation measures, and audit requirements.

· Support internal and external audits related to identity management.

Stakeholder Management

· Work closely with business, security, infrastructure, and application teams.

· Present architectural recommendations to senior leadership and clients.

· Manage technical risks and project dependencies.

Who You Are

You are resourceful and driven IT professional who has a track record of delivering superior customer experience.

Education

· Bachelor’s degree in computer science, Information Technology, Cybersecurity, or related field.

· Master's degree preferred.

Experience

· 10+ years of overall IT experience.

· 6+ years of hands-on SailPoint experience.

· 3+ years in a Solution Architect or Lead Architect role.

· Experience delivering large-scale IAM transformation programs.

Technical Skills

· SailPoint Identity Security Cloud (ISC)

· Identity Governance and Administration (IGA)

· Role-Based Access Control (RBAC)

· Access Certification & Compliance

· Provisioning & Lifecycle Management

· Application Onboarding

· REST APIs, SCIM, JDBC, LDAP

· Active Directory, Azure AD/Entra ID

· Java, BeanShell and SailPoint rule development

· Cloud platforms (Azure, AWS, GCP)

· ServiceNow integration

Preferred Certifications

· SailPoint Certified Identity Security Cloud Engineer

Job Level: Management

Additional Information

The base compensation range for this role is: $140,000.00-$187,250.00

Base salary offered is determined through an analytical approach utilizing a combination of factors including, but not limited to, relevant skills & experience, job location, and internal equity.

Regular employees are eligible to receive both short term and long-term incentives, including cash bonus and equity incentive opportunities, designed to reward recent achievements and recognize your future potential based on individual, business unit and company performance.

…