Director - IAM Lifecycle Design and Architecture
About the role
Job Purpose
Key responsibilities
This role will provide you the opportunity to lead key activities to progress your career. These responsibilities include some of the following:
- Define and govern the enterprise identity lifecycle target-state architecture, roadmap, design standards, and reusable patterns across cloud, hybrid, SaaS, on-premises, custom application, and agentic ecosystems.
- Accountable for end-to-end identity lifecycle design for employees, contingent workers, privileged users, service accounts, machine identities, non-human identities, AI agents, and digital workers, from identity creation and access fulfilment through change, review, suspension, and retirement.
- Own AI engineering delivery for IAM across agentic framework build, AI solution engineering, platform infrastructure and the data fabric pipeline
- Drive automated Joiner-Mover-Leaver processes using authoritative HR sources, identity governance tools, directory services, workflow platforms, and application integration patterns.
- Own architecture standards for access provisioning, deprovisioning, RBAC, ABAC, entitlement management, access certifications, segregation of duties, and audit evidence generation.
- Provide technical leadership for IAM platforms, HR systems, and enterprise IAM products.
- Partner with CSO teams and risk stakeholders to translate threat models, audit findings, regulatory expectations, and control gaps into funded initiatives and engineering backlogs.
- Establish governance for privileged access, secrets lifecycle, credential rotation, least privilege, service account ownership, and machine identity risk reduction.
- Build and mentor high-performing architecture and engineering teams, promoting secure-by-design practices, agile delivery, DevSecOps ways of working, and operational excellence.
Basic Qualifications
- 20+ years of progressive IT, security, identity, or enterprise architecture experience, including leadership responsibility for IAM lifecycle design, architecture, engineering enablement, and governance.
- Deep experience designing and operating enterprise IAM, Identity lifecycle management and IGA capabilities across large-scale regulated environments.
- Hands-on architecture exposure to IAM platforms, secrets management, HR source integration, and custom IAM solutions.
- Strong architecture and implementation experience across identity standards and modern technology stacks, including SAML, OIDC, OAuth 2.0, SCIM, LDAP, Kerberos, federation, SSO, REST APIs, GraphQL, Next.js, hybrid identity patterns, agentic implementations, Agent-to-Agent (A2A) protocol, and Microsoft Agent 365 (A365), with the ability to translate these technologies into secure, reusable identity lifecycle integration patterns.
- Demonstrable design experience with LLM orchestration, agentic systems, RAG patterns or API security for AI services.
- Experience creating access governance models, lifecycle automation, access certification workflows, privileged access controls, SoD controls, and audit-ready compliance evidence.
- Proven ability to influence executive stakeholders, advise CSO-level leadership, manage large global teams, and convert risk priorities into pragmatic engineering execution.
- Bachelor's degree in computer science engineering, Information Security, or a related discipline.
Preferred Qualifications
- Experience designing IAM solutions with SailPoint, Saviynt or a comparable platform.
- Architecture framework experience such as TOGAF or SABSA.
- Experience with cloud identity architecture across Azure, AWS or GCP.
- Familiarity with governance frameworks for agentic AI.
- Relevant certification such as CISSP, CISSP-ISSAP, SailPoint or Saviynt certification, TOGAF.
- Experience in pharmaceutical, life sciences or another highly regulated industry.
#AGTech
Skills
Account Lifecycle Management, Agentic AI, Authentication Systems, Automation Technology, Certificate Management, Cloud Based Services, Cloud IAM, Computer Programming, Configuration Management (CM), Database Management, Directory Services, Executive Influence, Identity Access Management (IAM), Identity Lifecycle Management, Information Technology (IT) Risk Management, Infrastructure Security, Life Cycle Manager, LLM Architecture, Privileged Access Management (PAM), Security Controls, System Monitors, Team Leadership, Troubleshooting
Uniting science, technology and talent to get ahead of disease together.
Inclusion at GSK
Important notice to Employment businesses/ Agencies
Not included in the source posting: about the role, benefits.
Skills
Who can apply
The employer didn't state any visa, work authorization, citizenship or clearance requirements in this posting. Confirm with the employer before applying.
Read automatically from the employer's posting text. Always confirm with the employer — requirements can change after a job is published.