{"id":3863088,"url":"https://alion.io/job/sandoz-iam-security-architect","title":"IAM Security Architect","company":{"id":453557,"name":"Sandoz","domain":"sandoz.com","url":"https://alion.io/company/sandoz-3","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":82,"open_postings":41,"ghost_share":0,"stale_share":0.902,"repost_share":0.024,"time_to_fill_p50_days":17,"computed_at":"2026-11-07T05:47:08Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CyberArk","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Microsoft Entra ID","optional":false}],"status":"live","first_seen_at":"2026-11-06T10:47:16Z","employer_posted_date":"2026-11-06","last_verified_at":"2026-11-07T02:34:56Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"Job Description Summary\nAs part of the Security Architecture & Advisory team, the Identity & Access Management (IAM) Security Architect defines the security architecture and design direction for Sandoz’s IAM landscape. The role translates security risks, business needs, regulatory requirements and approved security policies and controls into target architectures, reusable design patterns and implementation guidance that protect the confidentiality, integrity and availability of systems and data. Accountability centres on architecture and design advisory; independent security assurance, security policy ownership, compliance oversight and risk acceptance remain with the respective accountable functions, while implementation and operation remain with engineering and service teams.Job Description\nAs part of the Security Architecture & Advisory team, the Identity & Access Management (IAM) Security Architect defines the security architecture and design direction for Sandoz’s IAM landscape. The role translates security risks, business needs, regulatory requirements and approved security policies and controls into target architectures, reusable design patterns and implementation guidance that protect the confidentiality, integrity and availability of systems and data. Accountability centres on architecture and design advisory; independent security assurance, security policy ownership, compliance oversight and risk acceptance remain with the respective accountable functions, while implementation and operation remain with engineering and service teams.\nYour responsibilities include\nBut are not limited to:\nDefine the security architecture strategy, target state and roadmap, aligned with enterprise and IAM strategies.\nDesign secure IAM solutions (e.g., SailPoint IdentityNow, MS Entra ID, CyberArk and Microsoft Public Key Infrastructure) and integration patterns across cloud and on-premises environments; translate business, security and regulatory requirements into scalable designs aligned with enterprise architecture standards.\nConduct threat modelling to identify architectural risks, assess trade-offs and define mitigations.\nMaintain security reference architectures, reusable patterns and technical standards that translate approved policies and controls into implementable designs.\nAssess emerging threats and technology trends, evolving security designs and roadmaps to address their architectural implications.\nGuide engineering and delivery teams on security design and implementation issues; implementation and operations remain with those teams.\nAdvise stakeholders on architectural options and risks; collaborate with architecture, product, assurance and governance teams to align designs and support adoption and develop and maintain strong relationships with key vendors and strategic external partners.\n\nWhat you’ll bring to the role:\nEssential Requirements:\nMaster’s degree or equivalent in computer science, engineering, information technology or another relevant field.\nProven experience (4+ years) as an IAM Security Architect or IAM Solution Architect, with a strong focus on security architecture, solution design and architectural trade-offs.\nProven security architecture expertise in IAM, including Identity Governance and Administration (IGA) solution design and architectural guidance for implementation in complex enterprise environments.\nDemonstrated ability to develop target-state security architectures and reusable design patterns.\nStrong security architecture background, including threat modelling and security design reviews, with the ability to translate risks, controls and regulatory requirements into scalable designs.\nStrong design expertise in identity and access management, including identity lifecycle management, authentication and federation, single sign-on (SSO), multi-factor authentication (MFA), authorisation and privileged access management, including integration with enterprise platforms and applications.\nExcellent communication, negotiation and stakeholder skills, with the ability to explain architectural trade-offs and influence decisions at all levels.\n\nAbility to translate frameworks such as ISO 27001, CIS Controls, NIST and Cyber Essentials into technical designs.\nRelevant security architecture certifications (e.g., CISSP, ISSAP) and/or relevant IAM vendor-specific certifications are preferred; CISM or CISA complement, rather than replace, architecture expertise.\n\nWhy Sandoz?\nSandoz is the global leader in Biosimilar and Generic medicines, a segment of the healthcare industry that delivers 80% of the world’s medicines at 30% of the cost, touching the lives of more than 1 billion people across 100+ countries! While we are proud of our achievements, we have an ambition to do more so that everyone can achieve the basic human right of good health.\nWith investments in new development capabilities, production sites, new acquisitions, and partnerships, we have the opportunity to shape the future of Sandoz and help even more people gain access to low-cost, high-quality medicines, sustainably.\nOur momentum is powered by an open, collaborative culture driven by our talented and ambitious colleagues, who, in return for applying their skills, experience an agile and collegiate environment with impactful careers, where diversity of thought is welcomed and where personal growth is supported!\nSkills Desired\nBusiness Architecture, Client Counseling, Enterprise Architecture, Influencing Skills, IT Governance, Performance Management, Solution Architecture","description_format":"text","description_chars":5549,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"master","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Biologics & Biosimilars","Generic Drugs"],"lifecycle":[{"event":"open","at":"2026-11-06T10:47:16Z"}],"visa":[],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":0,"expected_fill_days":17,"reasons":["conf:3","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-11-07T05:47:08Z"},"pay":null,"html_url":"https://alion.io/job/sandoz-iam-security-architect","json_url":"https://alion.io/job/sandoz-iam-security-architect.json","meta":{"generated_at":"2026-11-07T22:04:50Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":36088,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-08T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":453557},"rest":"https://alion.io/mcp/rest/get_company?id=453557"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsandoz-iam-security-architect"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsandoz-iam-security-architect"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsandoz-iam-security-architect"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/sandoz-iam-security-architect\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsandoz-iam-security-architect"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3863088}},{"tool":"search_jobs","arguments":{"company":"sandoz.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3863088},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}