{"id":42012,"url":"https://alion.io/job/repligen-senior-identity-access-management-iam-engineer","title":"Senior Identity & Access Management (IAM) Engineer","company":{"id":8953,"name":"Repligen","domain":"repligen.com","url":"https://alion.io/company/repligen","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":92,"open_postings":6,"ghost_share":0,"stale_share":0.333,"repost_share":0,"time_to_fill_p50_days":49,"computed_at":"2026-10-17T05:46:00Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":{"label":"ET","utc_offset_min":-5,"utc_offset_max":-5},"hiring_geo_confidence":"explicit","locations":["United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":130000,"max":180000,"currency":"USD","period":"year","gross":null,"usd_annual":180000},"salary_estimate":null,"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"CyberArk","optional":false},{"name":"IAM","optional":false},{"name":"LDAP","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Okta","optional":false},{"name":"Ping Identity","optional":false},{"name":"PKI","optional":false},{"name":"PowerShell","optional":false},{"name":"ServiceNow","optional":false},{"name":"VPN","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-07-08T00:00:00Z","employer_posted_date":"2026-07-08","last_verified_at":"2026-10-18T05:41:16Z","board_verified":true,"closed_at":null,"days_open":102,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":102},"description":"Repligen is seeking a highly skilled and results-driven Senior Identity & Access Management (IAM) Engineer to join our Global Infrastructure & Operations organization. This role is responsible for the design, implementation, administration, and continuous improvement of enterprise identity, authentication, access management, identity governance, and Public Key Infrastructure (PKI) services across a global environment.The Senior IAM Engineer will serve as the technical owner for Microsoft Entra ID, identity lifecycle management, Single Sign-On integrations, authentication services, privileged access management, certificate services, and network access control platforms. This individual will partner closely with Infrastructure, Cybersecurity, Digital Workplace, HR, Application Owners, and business stakeholders to deliver secure, scalable, and automated identity services that enhance user experience while supporting compliance and security requirements.\nThis is a hands-on engineering role requiring deep expertise in identity technologies, authentication protocols, enterprise integrations, automation, and access governance. The successful candidate will play a key role in advancing Repligen's identity strategy, strengthening access controls, improving operational efficiency, and enabling secure access across cloud, on-premises, and SaaS environments.\nRemote; candidates must reside in the Eastern Time Zone.\nResponsibilities\nOwn the administration, engineering, governance, and continuous improvement of enterprise identity and access management services.\nServe as the primary technical owner for Microsoft Entra ID and related identity platforms.\nDesign, implement, and support authentication and authorization solutions across cloud and on-premises environments.\nAdminister and maintain Conditional Access policies, Multi-Factor Authentication (MFA), Identity Protection, passwordless authentication, and modern access management solutions.\nDesign and support Single Sign-On (SSO) integrations utilizing SAML, OAuth, OpenID Connect, LDAP, Kerberos, and SCIM technologies.\nManage enterprise application onboarding, identity integrations, access provisioning, and entitlement management processes.\nPartner with HR, Infrastructure, and application owners to design and automate Joiner, Mover, and Leaver (JML) processes.\nImplement and maintain role-based access controls (RBAC), access governance standards, segregation of duties, and least-privilege access models.\nAdminister Privileged Identity Management (PIM), privileged access controls, privileged account governance, and delegated administration models.\nConduct access reviews, entitlement reviews, and certification activities to ensure appropriate access to systems and applications.\nAdminister and maintain enterprise Public Key Infrastructure (PKI), including certificate authorities, certificate lifecycle management, issuance, renewal, revocation, and governance.\nManage digital certificates supporting users, devices, applications, servers, network infrastructure, and cloud services.\nSupport certificate-based authentication, passwordless authentication, and device trust technologies across enterprise platforms.\nPartner with Network Engineering teams to support secure wired, wireless, VPN, remote access, and device authentication services.\nMonitor identity, authentication, PKI, and NAC platform health while proactively identifying and addressing operational issues.\nDevelop automation using PowerShell, Microsoft Graph, and related technologies to improve provisioning, governance, monitoring, and reporting processes.\nBuild and maintain operational dashboards, metrics, and reporting related to identity health, access governance, compliance, and platform performance.\nSupport compliance, audit, and regulatory requirements through evidence collection, reporting, and control validation.\nPartner with Cybersecurity teams to implement secure identity controls aligned with Zero Trust principles and enterprise security standards.\nParticipate in incident response, root cause analysis, and remediation activities related to identity, authentication, and access management services.\nCreate and maintain technical documentation, architecture diagrams, operational runbooks, and support procedures.\nEvaluate emerging identity, authentication, PKI, and access management technologies and recommend improvements that enhance security, scalability, and user experience.\nProvide technical guidance and mentorship to IT teams and application owners regarding identity and access management best practices.\nQualifications\nBachelor's degree in Information Technology, Computer Science, Information Systems, Cybersecurity, or a related field, or equivalent experience.\nMinimum of 7 years of hands-on experience supporting Identity and Access Management technologies in a medium or large enterprise environment.\nDeep expertise with Microsoft Entra ID, including Conditional Access, Identity Protection, Multi-Factor Authentication, Identity Governance, and access lifecycle management.\nStrong experience implementing and supporting Single Sign-On technologies, including SAML, OAuth, OpenID Connect, LDAP, Kerberos, and SCIM provisioning.\nExperience designing and supporting automated Joiner, Mover, and Leaver (JML) processes and identity lifecycle management workflows.\nHands-on experience with Privileged Identity Management (PIM), role-based access controls, access reviews, entitlement management, and access certification processes.\nExperience integrating enterprise SaaS platforms such as Microsoft 365, ServiceNow, Workday, SAP, Concur, Salesforce, MasterControl, and similar business applications.\nStrong experience with Microsoft Active Directory and hybrid identity environments.\nExperience administering enterprise Public Key Infrastructure (PKI), including Microsoft Active Directory Certificate Services (AD CS), certificate lifecycle management, and certificate-based authentication.\nExperience supporting modern identity security platforms such as Beyond Identity, Okta, Duo, Ping Identity, CyberArk, SailPoint, Saviynt, or similar technologies is highly desirable.\nStrong understanding of modern identity architecture, authentication protocols, Zero Trust principles, passwordless authentication, device trust, and identity-centric security models.\nStrong PowerShell scripting and automation experience.\nExperience utilizing Microsoft Graph API and related automation frameworks for identity administration and governance.\nWorking knowledge of compliance controls, audit requirements, and identity governance best practices.\nStrong analytical, troubleshooting, communication, and documentation skills.\nExperience supporting global and geographically distributed organizations.\nMicrosoft certifications such as SC-300 (Identity and Access Administrator), SC-100 (Cybersecurity Architect), or equivalent certifications are highly desirable.\nOur mission is to inspire advances in bioprocessing as a trusted partner in the production of biologic drugs that improve human health worldwide. Focused on cost and process efficiencies, we deliver innovative technologies and solutions that help set new standards in bioprocessing. The estimated salary range for this role, based in the United States of America is $130,000-$180,000. Compensation decisions are dependent on several factors including, but not limited to an individual's qualifications, location, internal equity, and alignment with market data. Additionally, employees are eligible to participate in one of our variable cash programs (bonus or commission) and eligible roles may receive equity as part of the compensation package. We offer a wide range of benefits such as paid time off, health/dental/vision, retirement benefits and flexible spending accounts. All compensation and benefits information will be confirmed in writing at the time of offer.","description_format":"text","description_chars":7902,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Equity"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Identity Management","Bioprocessing"],"lifecycle":[{"event":"open","at":"2026-07-08T00:00:00Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 3","filings_12m":3,"filings_prev_12m":5,"green_card_filings_12m":0,"median_offered_wage_usd":137500,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":{"score":17,"band":"cold","label":"Long shot","p_open":1,"p_active":0.488,"p_room":0.35,"age_days":101,"expected_fill_days":49,"reasons":["conf:3","velocity","win:tail"],"computed_at":"2026-10-17T05:46:00Z"},"pay":{"stated_usd_annual":180000,"is_top_pay":true},"html_url":"https://alion.io/job/repligen-senior-identity-access-management-iam-engineer","json_url":"https://alion.io/job/repligen-senior-identity-access-management-iam-engineer.json","meta":{"generated_at":"2026-10-18T08:01:51Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":12065,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-19T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":8953},"rest":"https://alion.io/mcp/rest/get_company?id=8953"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Frepligen-senior-identity-access-management-iam-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Frepligen-senior-identity-access-management-iam-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Frepligen-senior-identity-access-management-iam-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/repligen-senior-identity-access-management-iam-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Frepligen-senior-identity-access-management-iam-engineer"}]}