Senior Manager, Authentication Engineer

• Develop and execute a comprehensive Authentication strategy for secure, user-friendly access across enterprise applications and platforms
• Drive Single Sign-On adoption and improve the identity management ecosystem
• Oversee design, implementation, and optimization of the SSO/MFA framework
• Ensure authentication services are scalable, resilient, and integrated with internal, third‑party, and cloud‑based services
• Collaborate with IT, security, development, product, Cybersecurity, Infrastructure, Cloud Engineering, Application Development, and business stakeholders
• Guide best practices for secure access management
• Ensure SSO solutions align with GDPR, HIPAA, NIST, SOX, GXP, and other applicable regulations and standards
• Lead development and implementation of authentication and authorization security controls
• Evaluate and select identity management tools, SSO solutions, MFA, and identity federation technologies
• Manage vendor and third‑party provider relationships
• Lead investigation and resolution of SSO/MFA incidents and implement improvements to minimize disruptions
• Improve end‑user experience by simplifying login processes and reducing friction
• Develop KPIs for SSO performance and security metrics
• Report on SSO effectiveness, user engagement, security breaches, and other relevant metrics
• Lead IAM system support, engineering, and operations teams within a Global Business Unit
• Manage and execute long‑term complex projects
• Travel internationally and domestically periodically, less than 10%

Requirements

• Bachelor’s degree in relevant discipline
• 6+ years of experience in identity and access management
• At least 4 years focused on Single Sign-On (SSO) solutions
• Strong background in IT security, authentication protocols, and IAM frameworks supporting SSO for more than 50,000 users
• Deep understanding of SAML, OAuth, and OpenID Connect
• Experience with identity federation, multi‑factor authentication, and cloud‑based IAM solutions
• Knowledge of identity providers such as Okta, Azure AD, or Ping Identity
• Ability to solve highly complex authentication and authorization problems in a global environment
• Strong understanding of encryption, tokenization, and secure protocols
• Experience leading IAM system support, engineering, and operations teams within a Global Business Unit
• Understanding of Sarbanes‑Oxley (SOX) and GXP quality regulations and guidelines
• Proven track record managing and executing long‑term complex projects
• Demonstrated experience in an agile work environment
• Master’s degree in relevant discipline preferred
• Deep expertise in Ping Identity solutions highly desirable
• Must be able to work from the assigned Pfizer office 2‑3 days per week, or as needed by the business
• Must be authorized to be employed in the U.S. by any employer
• Must have permanent work authorization in the United States
• U.S. work visa sponsorship is not available now or in the future
• Capable of working through a personal laptop computer or mobile device for extended periods

Core Competencies

Demonstrates expertise in developing and executing comprehensive authentication strategies, focusing on Single Sign-On (SSO) solutions and identity management frameworks. Proficient in managing complex projects and leading IAM system support within a global environment while ensuring compliance with relevant regulations.

Highest-signal resume keywords

• Identity And Access Management (IAM)
• Single Sign-On (SSO) Solutions
• Multi-Factor Authentication (MFA)
• SAML, OAuth, And OpenID Connect
• IT Security And Authentication Protocols

ATS Optimization Keywords

Hard Skills

• Identity Management
• Single Sign-On (SSO)
• Multi-Factor Authentication (MFA)
• SAML
• OAuth
• OpenID Connect
• Encryption
• Tokenization
• Cloud-Based IAM Solutions
• Project Management

Soft Skills

• Problem Solving
• Collaboration
• Leadership
• Communication
• User Experience Improvement

Industry Keywords

• GDPR
• HIPAA
• NIST
• SOX
• GXP

Tools & Technologies

• Okta
• Azure AD
• Ping Identity
• IAM Tools
• SSO Solutions