2,007,098open jobs
119,200companies
249,029added this week
Browse all
Salary
$77k – $143k per year
Location
Hybrid (Barcelona, Spain)
Employment
Full-Time

Confirmed on the employer's own hiring board on Oct 27, 2026. First seen by Alion on Oct 22, 2026. Novartis scores B on the Alion truth index.

Overview
Company
Impact
Profile match
Novartis is a Swiss pharmaceutical company created in 1996 by the merger of Ciba-Geigy and Sandoz, two Basel chemical and drug houses with roots in the nineteenth century. It has spent the past decade narrowing itself into a pure innovative medicines business, spinning off its generics arm as Sandoz in 2023 and its eye care business as Alcon in 2019, and now concentrates on cardiovascular, immunology, neuroscience and oncology, including radioligand therapies and gene therapy. Headquartered in Basel and listed in Zurich and New York, it is among the largest research spenders in the industry.

Salary Range:

€69,000.00 - €128,100.00

Job Description Summary

Dir. DDIT ISC Functional Security Architect role provides enterprise-level architectural leadership and specialist security expertise for Identity and Access Management (IAM). The role partners closely with Functional Security Architects, Enterprise Architects, Platform Architects, business stakeholders and IAM capability teams to ensure that solutions implement secure, scalable and reusable identity patterns aligned with enterprise security standards.

It also contributes to the strategic development and maturity of enterprise IAM capabilities, including Identity Governance and Administration (IGA), authentication, authorization, federation, Privileged Access Management (PAM), machine/workload identities and emerging identity requirements associated with AI and autonomous agents.

A key focus of the role is developing IAM architecture for AI-enabled applications and Agentic AI, including identities for AI agents, delegated authority, agent-to-agent and agent-to-application access, human-to-agent delegation, workload identities, least-privilege authorization, JIT access, credential and secret management, lifecycle governance, auditability and accountability.

Job Description

Key Responsibilities:

  • Review, approve and govern IAM technology variants and architecture patterns against agreed enterprise security and architecture standards.
  • Drive IAM technology and architecture standards in close collaboration with Enterprise Architecture, Security Architecture, IAM capability teams and Architecture Governance.
  • Act as the IAM subject-matter expert for Functional Security Architects, providing IAM-specific architecture guidance, design reviews, reusable patterns and risk advice for projects and programmes.
  • Support development and evolution of enterprise IAM capabilities and their associated target architectures, roadmaps and reference architectures.
  • Advance the maturity of IAM architecture and governance processes, ensuring IAM architectural decisions and standards remain relevant as business, security and technology requirements evolve.
  • Drive relevant architecture KPIs and metrics to assess adoption, architectural compliance, exceptions and maturity of IAM capabilities.
  • Identify opportunities for consolidation, standardisation and retirement of overlapping IAM technologies and patterns. Proactively communicate IAM risks and architectural considerations to business, security and technology stakeholders.
  • Participate in evaluation of new IAM and security technologies, providing a holistic assessment of security, architecture, interoperability, lifecycle and operational considerations.
  • Engage early in solution and demand governance to ensure IAM requirements are identified before detailed solution design and implementation.
  • Promote reuse of approved enterprise IAM capabilities and patterns rather than creation of application-specific identity solutions. Build and maintain an IAM architecture Community of Practice, facilitating knowledge sharing and continuous improvement.

Essential Requirement:

  • Strong experience in Identity and Access Management architecture, security architecture or enterprise security architecture.
  • Deep understanding of identity lifecycle management, authentication, authorisation, federation, access governance and privileged access.
  • Strong understanding of OAuth 2.0, OpenID Connect, SAML 2.0, SCIM and modern identity-federation patterns.
  • Experience architecting enterprise SSO, MFA and passwordless authentication solutions.
  • Strong understanding of RBAC, ABAC, policy-based access control, least privilege and separation of duties.
  • Experience with identity governance and administration and privileged access management. Understanding of cloud-native identity, workload identity, APIs, service accounts and other non-human identities.
  • Knowledge of Zero Trust architecture and identity-centric security.Ability to translate security requirements into practical, reusable architecture patterns.
  • Strong stakeholder-management skills and ability to provide specialist IAM guidance to Solution Security Architects, engineering teams and enterprise architects.

Desirable Requirement:

  • Understanding of security architecture for Generative AI and AI-enabled applications.
  • Knowledge of IAM challenges associated with autonomous and semi-autonomous AI agents. Understanding of agent identity, workload identity, delegated authorisation and machine-to-machine trust.

Benefits & Rewards

At Novartis, we’re committed to reimagining medicine together - and rewarding the people who make it happen.

  • Expected Annual Base Salary Range for role: 69,000.00 - 128,100.00 EUR

The base salary offered is determined based on gender-neutral objectives, such as relevant skills, competencies and experience in accordance with the Novartis pay setting policy and upon joining Novartis will be reviewed periodically.

In addition to your base salary, you may be eligible for a performance-based bonus depending on certain performance parameters.

The rewards of being part of our team go far beyond base pay and incentives. We also offer a variety of competitive benefits in kind to help you thrive personally and professionally, such as insurance plans, retirement plans, wellbeing resources and global recognition programs. In addition, we provide flexible and hybrid working options, where possible, and minimum 14 weeks paid parental leave.

Pay equity is a fundamental principle of our employment policy and reflects our commitment to create a diverse, equitable and inclusive environment that treats all employees with dignity and respect, as outlined in our Code of Ethics.

Read our brochure to learn more about our global total rewards offering:

https://www.novartis.com/sites/novartis_com/files/novartis-life-handbook.pdf

Note: Benefits and compensation may vary by country and are subject to local legal requirements, including provisions of collective bargaining agreements where applicable. A full overview of your compensation package, including any relevant collective bargaining agreement details applicable to your role based on your employment location and Novartis employer entity, will be communicated separately to you during the application process.

Commitment to Diversity and Inclusion / EEO

Novartis is committed to building an outstanding, inclusive work environment and diverse teams’ representative of the patients and communities we serve.

You’ll receive: You can find everything you need to know about our benefits and rewards in the Novartis Life Handbook. https://www.novartis.com/careers/benefits-rewards Commitment to Diversity and Inclusion: Novartis is committed to building an outstanding, inclusive work environment and diverse teams' representative of the patients and communities we serve.

Skills Desired

Business Architecture, Business Value Creation, Change Management, Consulting, Digital Capabilities, Enterprise Architecture (EA), Influencing Skills, IT Governance, Solution Architecture, Stakeholder Management
Free account
Stop reading job ads. Get the ones that fit.
One free account turns this page into a shortlist built around your stack, your level and your pay.
Match on every job. Stack, seniority, pay and location, scored against your profile.
2,007,098 open roles. Read straight off company career pages, refreshed every day.
Unlimited applications. Every one you send is tracked in one place, on-site or on a company board.
3 tailored CVs a month. Rewritten for the exact job you are applying to. Included free.
Create a free account Continue with Google
Free forever. No card. Under a minute.

Your match

How well do you fit this role?
Two answers are enough for a real match. No account needed.
Check my fit
Answers stay in this browser until you create an account.

Recommended for you based on this role

Security
Similar stack
Same company
Barcelona
≈ $43k – $115k per year (Estimated) · In office · Full-Time · Bachelor's Degree · Albacete
DevOps
Ansible
Apply
≈ $47k – $109k per year (Estimated) · Remote (Spain) · Full-Time
Java
PHP
Kotlin
TypeScript
Ruby
Swift
Java
Spring Boot
Spring Security
Ruby
Ruby on Rails
AI/ML
Human-in-the-Loop
DevOps
GitHub Actions
Datadog
GitLab CI
ArgoCD
AWS
Kubernetes
Amazon EKS
Cybersecurity
DefectDojo
PCI DSS
GDPR
OWASP ASVS
OWASP
Web3
Magic
Apply
≈ $41k – $111k per year (Estimated) · In office · Sant Cugat del Vallès
Apply
≈ $40k – $108k per year (Estimated) · In office · Full-Time · PhD · Barcelona · Alcobendas · Milan
DevOps
Platform Engineering
Cybersecurity
SIEM
Apply
≈ $55k – $131k per year (Estimated) · In office · Full-Time · PhD · Barcelona · Alcobendas · Milan
DevOps
GCP
Azure
AWS
IAM
Cybersecurity
Zero Trust
Least Privilege
Microsoft Entra ID
Active Directory
Apply
$21k – $42k per year · In office · Full-Time · Bengaluru
Python
Bash
AI/ML
Model Context Protocol
AI Agents
DevOps
GCP
Azure
CI/CD
AWS
GitHub
Linux
Cybersecurity
ISO 27001
PCI DSS
NIST 800-53
CVSS
Zero Trust
Least Privilege
Apply
In office · Shenzhen
Python
C++
Lua
AI/ML
AI Agents
LLM
Game Dev
Godot
Apply
≈ $19k – $42k per year (Estimated) · In office · Part-Time · Bachelor's Degree · Alcobendas
AI/ML
AI Agents
Apply
In office · Kiambu
DevOps
Azure
Windows Server
IAM
TCP/IP
DNS
DHCP
Cybersecurity
Active Directory
SIEM
Analytics
Power BI
Management
Power Automate
Power Apps
SharePoint
Service Desk
Apply
≈ $52k – $105k per year (Estimated) · Hybrid · Full-Time · Paris
AI/ML
AI Agents
Marketing
HubSpot
Apply
$65k – $120k per year · Hybrid · Full-Time · 8+ years exp · Bachelor's Degree · Barcelona
Python
DevOps
Splunk
Azure
AWS
Cybersecurity
Microsoft Sentinel
Microsoft Defender
MITRE ATT&CK
SIEM
Apply
$65k – $120k per year · Hybrid · Full-Time · 15+ years exp · Bachelor's Degree · Barcelona
Cybersecurity
PKI
SIEM
DLP
Management
ITIL
Apply
≈ $60k – $145k per year (Estimated) · Hybrid · Full-Time · 8+ years exp · Bachelor's Degree · Prague
Python
DevOps
Splunk
Azure
AWS
Cybersecurity
Microsoft Sentinel
Microsoft Defender
MITRE ATT&CK
SIEM
Apply
≈ $20k – $43k per year (Estimated) · Hybrid · Full-Time · 8+ years exp · Hyderabad
Apply
≈ $20k – $43k per year (Estimated) · In office · Full-Time · 2+ years exp · Bachelor's Degree · Hyderabad
Cybersecurity
ISO 27001
SIEM
Apply
≈ $21k – $47k per year (Estimated) · In office · Internship · Bachelor's Degree · Barcelona
Analytics
Microsoft Excel
Apply
≈ $56k – $107k per year (Estimated) · In office · Full-Time · 8+ years exp · Bachelor's Degree · Brussels · Barcelona · Woking
Apply
In office · Full-Time · Barcelona
Apply
In office · Part-Time · Barcelona
Apply
≈ $52k – $115k per year (Estimated) · Remote (Italy, Spain, Portugal) · Full-Time · Lisbon · Barcelona · Rome
Apply
See all jobs
This is one of many
2,007,098 more open roles from verified company boards, updated every day.