The Senior Manager of Authentication is responsible for the strategy, architecture, implementation, and operational management of enterprise authentication services across on-premises, cloud, and hybrid environments.
Compensation
The annual base salary for this position ranges from $124,400.00 to $207,400.00. In addition, this position is eligible for participation in Pfizer’s Global Performance Plan with a bonus target of 17.5% of the base salary and eligibility to participate in our share based long term incentive program.
Responsibilities
Develop and execute a comprehensive Authentication strategy to ensure secure and user-friendly access across all enterprise applications and platforms.
Oversee the design, implementation, and ongoing optimization of the SSO / MFA framework.
Work closely with cross-functional teams including IT, security, development, and product teams to ensure seamless integration of SSO & MFA capabilities into new and existing platforms.
Maintain a strong understanding of security protocols and compliance standards (e.g., GDPR, HIPAA, NIST) and ensure that SSO solutions align with relevant regulations and industry standards.
Evaluate and select appropriate identity management tools, including SSO solutions, Multi-Factor Authentication (MFA), and Identity Federation.
The Principal Enterprise Cybersecurity Architect serves as City of Hope’s senior technical authority for enterprise cybersecurity architecture, defining and advancing security architecture, engineering standards, and control frameworks across clinical, research, business, and technology environments.
Locations (5)
Los Angeles, California, United States
Orange County, California, United States
Atlanta, United States
Chicago, Illinois, United States
Phoenix, United States
B
IAM & Cloud Security Architect, Microsoft Entra ID
Design, implement, and operate the company’s Zscaler environment and related network security controls.
Compensation
The base salary range for this position is $95,000 to $110,000, excluding fringe benefits or potential bonuses.
Responsibilities
Design, implement, administer, and troubleshoot ZIA, ZPA, Client Connector, App Connectors, traffic forwarding, TLS inspection, secure web gateway, firewall, threat protection, CASB, and DLP controls
Secure employee access to internet, SaaS, and private applications using identity-, device-, risk-, and data-aware policies
Design secure connectivity and segmentation for on-premises and cloud workloads, private applications, administrative services, and machine-to-machine communications
Integrate Zscaler with identity, endpoint, cloud, certificate, SIEM, and incident-response platforms
Develop and maintain the target architecture and roadmap for Zscaler, zero-trust networking, secure access, and cloud workload protection
Working with Application Developers and Application Architects to translate Logical Application Designs into Infrastructure Aligned Deployments.
Create Detailed Technical Designs (Diagram and Bill of Materials) for use by Engineering teams in build/deployment; and as artifacts for post deployment testing and validation.
Lead DevOps & Cloud System Engineer to design, build, automate, and operate highly available cloud and application infrastructure in a large-scale enterprise environment.
Compensation
Estimated salary range for this position is $110993.26 - $144291.24 / year depending on experience.
Responsibilities
Provide technical leadership in problem solving, maintenance, and project build situations
Install, maintain, and configure systems infrastructure on both on premise and Cloud platforms
Design and implement technical solutions that integrate multiple applications, infrastructure components, and enterprise platforms
Partner closely with application development, architecture, security, networking, and operations teams to deliver reliable, scalable, secure, and automated platforms
Develop reusable automation that improves deployment consistency, operational efficiency, and system reliability
Requirements
Bachelor's
Master's preferred
Nice to have: Advanced experience designing and operating production workloads on GCP / AWS
Nice to have: Experience managing Kubernetes platforms at enterprise scale
Nice to have: Experience creating reusable Terraform modules and standardized cloud infrastructure patterns
Lead and mentor PAM engineers and administrators, design and implement enterprise privileged access management strategy, architecture, and operational processes.
Compensation
$112,000 - $179,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual’s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.
Responsibilities
Lead and mentor PAM engineers and administrators
Lead the development and implementation of enterprise PAM strategy, architecture, standards, and operational processes
Manage the lifecycle of privileged accounts, including discovery, onboarding, credential vaulting, rotation, access provisioning, and deprovisioning
Establish and maintain controls for privileged credential storage, session management, privileged session recording, and just-in-time access
Develop and enforce least-privilege principles for administrative, root, domain, database, network, cloud, and application accounts
Senior Engineer - PING with strong understanding of IAM space and experience with multiple 3rd party IAM solutions.
Compensation
$ 45-48/hr T4
Responsibilities
Strong understanding of the Identity & Access Management (IAM) space and experience with multiple 3rd party IAM solutions.
Working knowledge of industry standards & protocols including SAML, OpenID Connect, Oauth, LDAP, Kerberos, WS-Fed, etc.
Experience with technologies such as Single Sign On, MFA, Adaptive Risk-based authentication, Identity Federation, Authentication & Authorization for REST, Microservices, & SOAP, IAM integration with cloud providers like AWS/Azure/Google, Directory integration including Active Directory, LDAP, Virtual Directories, Integration with provisioning & attestation systems, Java, Javascript, Python, Unix/Linux Bash shell, regex, scripting to automate tasks, configuration changes, data collection and user provisioning, LAN/WAN/Firewall/VPN network technologies, monitoring, and support best practices.
Define and evolve enterprise cybersecurity architecture, reference architectures, security standards, and technology roadmaps across network, endpoint, identity, application, data, cloud, and hybrid environments.
Lead security architecture and engineering for Zero Trust, microsegmentation, multi-cloud security, workload and container protection, secure CI/CD, identity federation, privileged access, logging, and monitoring.
Direct threat modeling, security design reviews, control assessments, penetration-testing oversight, vulnerability lifecycle management, and remediation planning.
Lead enterprise cybersecurity risk assessments and translate legal, regulatory, audit, and policy requirements into actionable technical controls.
Partner with GRC teams on control mappings, risk registers, exceptions, compensating controls, audit evidence, and remediation plans.
Principal Security Architect- IAMNewCity of Hope · Los Angeles, US+4 more
Software Engineer II- RORNewPAR Technology · Jaipur
Lead DevOps & Cloud System EngineerBaptist Health South Florida · US
Privileged Access Management (PAM) Identity LeadPeraton · Remote