senior associate, identity governance engineering 4961496

Technology impacts everything we do. Pfizer’s digital and ‘data first’ strategy focuses on implementing impactful and innovative technology solutions across all functions from research to manufacturing. Whether you are digitizing drug discovery and development, identifying solutions, or making our work easier and faster, you will be making a difference to countless lives.

What You Will Achieve

Pfizer’s CISO organization delivers proactive cyber defense for Pfizer global enterprise.  Our mission is to secure all of Pfizer’s digital information assets ranging from our scientific breakthroughs to the manufacturing floor, and out to the patients we serve.  We achieve this mission through a combination of world-class talent, top-tier technologies, industry leading best practices, and the promotion of a cybersecurity ownership culture across the company.  

Identity Governance and Administration (IGA) capabilities are central to how Pfizer secures access across the enterprise. The Senior Associate, Identity Governance Engineering, is responsible for designing, building, and supporting SailPoint Identity Security Cloud (ISC/IdentityNow) solutions, including custom connectors, provisioning patterns, forms, and workflows, while maintaining familiarity with other IGA tools and platforms.

This is a hands-on engineering role responsible for supporting the identity lifecycle management process end-to-end, including Joiner, Mover, and Leaver (JML) workflows, RBAC and ABAC access models, and automated provisioning and deprovisioning across enterprise applications. The role partners closely with business and technical stakeholders to translate requirements into scalable, compliant IGA solutions.

The Senior Associate will support technical discovery, solution design, and troubleshooting activities throughout implementation and post-go-live support, helping ensure Pfizer’s identity governance environment remains secure, reliable, and aligned to compliance requirements such as SOX, HIPAA, and NIST.

ROLE RESPONSIBILITIES

• Design, develop, and support SailPoint Identity Security Cloud (ISC/IdentityNow) solutions, including custom connectors, provisioning patterns, forms, and workflows.

• Support the end-to-end identity lifecycle management process, including Joiner, Mover, and Leaver (JML) workflows.

• Design and implement RBAC and ABAC models to support enterprise access management requirements.

• Configure and maintain automated provisioning and deprovisioning across enterprise applications.

• Develop and support REST API, SCIM, and other enterprise identity integrations.

• Lead technical discovery sessions, requirements gathering, and solution design workshops with client stakeholders.

• Troubleshoot and resolve complex technical issues during implementation and post-go-live support.

• Create and maintain technical documentation, including solution design documents, configuration guides, and runbooks.

• Provide administration and operational support for SailPoint environments, ensuring system stability and reliability.

• Support compliance and audit requirements, including SOX, HIPAA, and NIST controls, as they relate to identity governance processes.

• Maintain familiarity with other IAM tools and platforms to support tool evaluations and cross-platform integration efforts.

• Communicate effectively with business and technical stakeholders to translate requirements into scalable identity governance solutions.

BASIC QUALIFICATIONS

• Bachelor’s degree in Computer Science, Information Technology, or a related discipline, or equivalent experience.

• 2+ years of experience designing, implementing, and supporting SailPoint Identity Security Cloud (ISC/IdentityNow) solutions or similar tools

• Strong experience with identity lifecycle management, including Joiner, Mover, and Leaver processes.

• Hands-on experience designing and implementing RBAC and ABAC models.

• Experience with automated provisioning and deprovisioning across enterprise applications.

• Experience with REST APIs, SCIM, and enterprise identity integrations.

• Strong troubleshooting, administration, and operational support experience within SailPoint environments.

• Experience supporting compliance requirements such as SOX, HIPAA, and NIST.

• Strong understanding of identity governance and administration (IGA) principles and best practices.

• Proficient business English language skills (written and verbal)

• Excellent communication and consulting skills with the ability to work directly with business and technical stakeholders.

• Demonstrated experience in an agile work environment possessing qualities such as a collaborative mindset, adaptability to change, and a proactive problem-solving approach.

PREFERRED QUALIFICATIONS

• Strong experience integrating SailPoint with Active Directory, Entra ID, Okta, ServiceNow, Salesforce, Workday, and other identity-connected platforms.

• Expertise in access certification campaigns, identity governance, and segregation of duties (SoD) controls.

• Familiarity with other IGA tools and platforms beyond SailPoint.

• SailPoint Identity Security Cloud Certifications