Work Schedule
Standard (Mon-Fri)

Environmental Conditions
Office

Job Description

When you join us at Thermo Fisher Scientific, you'll be part of an inquisitive team that shares your passion for exploration and discovery. With revenues of more than $40 billion and the largest investment in R&D in the industry, we give our people the resources and chances to create significant contributions to the world.

Location/Division Specific Information

This position is in the Cybersecurity Architecture team within Corporate Infrastructure & Security (CIS).

Discover Impactful Work:

As a Sr. Staff Security Architect, you'll be a part of our global Cybersecurity Architecture team, responsible for overall enterprise security architecture and security solutions architecture. Your main focus areas are various aspects of identity security and protection, combined with endpoint security solutions providing detection, prevention, and response capabilities and related configuration management.

• Architect security solutions for identity management across all aspects of a hybrid cloud environment; administrative access, user access and key management within multiple cloud and on-premises environments.
• Work with our endpoint security solutioning to enhance our endpoint security tooling, technologies and related processes.
• Proactively identify and prioritize corporate security risk and present solutions to advise our leadership to make informed decisions and maintain a strong security posture within the identity security and protection realm.
• Continuously improve visibility and anomaly detection, define and implement processes to ensure appropriate actions are taken from findings.
• Continually identify new technologies, methods, and procedures for enhancing the security program.
• Partner with architects and engineers across the company to ensure solutions are in line with corporate strategy.

• Ability to explain technical details to IT and business leadership with a focus on encouraging technical changes or investment where appropriate.
• Demonstrated ability to define clear documentation and processes, ensuring engineered solutions are well defined and repeatable.
• Deep hands-on experience with all aspects of identity & access management along with identity lifecycle management, including SSO solutions, Active Directory, Entra ID, PKI and device identities.
• Experience with identity management for public and private cloud environments, including key and secret management for identities used by applications and services.
• Proficiency in programming, automation, and API development, including expertise in API access management.
• Deep understanding of endpoint protection technologies, tools and security policies.

• Bachelor's Degree in cybersecurity, computer science, or related field. Equivalent work experience is accepted.
• Certifications not required, but encouraged: CISSP, or other security-related certifications a plus.

• 7+ years of hands-on experience maintaining, managing and designing multiple identity management solutions in varying states of solution maturity.
• Demonstration of progressive roles with focus on IAM solutions such as Active Directory, Virtual Directory Solutions, SSO, MFA, PAM, Secrets Management and PKI.
• Hands-on experience with endpoint security solutions, endpoint configuration management and related industry standards.
• Experience in automation tools and scription languages such as Python and PowerShell.

• Strong proactive analytical and problem-solving skills in both ambiguous and tactical situations with a bias for action.
• Ability to act both independently and as a part of a team.
• Excellent written and verbal communication skills.
• Dedication to excellence, high-quality standards, and attention to detail.