Senior Identity & Access Management (IAM) Engineer

Repligen is seeking a highly skilled and results-driven Senior Identity & Access Management (IAM) Engineer to join our Global Infrastructure & Operations organization. This role is responsible for the design, implementation, administration, and continuous improvement of enterprise identity, authentication, access management, identity governance, and Public Key Infrastructure (PKI) services across a global environment.
The Senior IAM Engineer will serve as the technical owner for Microsoft Entra ID, identity lifecycle management, Single Sign-On integrations, authentication services, privileged access management, certificate services, and network access control platforms. This individual will partner closely with Infrastructure, Cybersecurity, Digital Workplace, HR, Application Owners, and business stakeholders to deliver secure, scalable, and automated identity services that enhance user experience while supporting compliance and security requirements.
This is a hands-on engineering role requiring deep expertise in identity technologies, authentication protocols, enterprise integrations, automation, and access governance. The successful candidate will play a key role in advancing Repligen's identity strategy, strengthening access controls, improving operational efficiency, and enabling secure access across cloud, on-premises, and SaaS environments.

Remote; candidates must reside in the Eastern Time Zone.

Responsibilities

• Own the administration, engineering, governance, and continuous improvement of enterprise identity and access management services.
• Serve as the primary technical owner for Microsoft Entra ID and related identity platforms.
• Design, implement, and support authentication and authorization solutions across cloud and on-premises environments.
• Administer and maintain Conditional Access policies, Multi-Factor Authentication (MFA), Identity Protection, passwordless authentication, and modern access management solutions.
• Design and support Single Sign-On (SSO) integrations utilizing SAML, OAuth, OpenID Connect, LDAP, Kerberos, and SCIM technologies.
• Manage enterprise application onboarding, identity integrations, access provisioning, and entitlement management processes.
• Partner with HR, Infrastructure, and application owners to design and automate Joiner, Mover, and Leaver (JML) processes.
• Implement and maintain role-based access controls (RBAC), access governance standards, segregation of duties, and least-privilege access models.
• Administer Privileged Identity Management (PIM), privileged access controls, privileged account governance, and delegated administration models.
• Conduct access reviews, entitlement reviews, and certification activities to ensure appropriate access to systems and applications.
• Administer and maintain enterprise Public Key Infrastructure (PKI), including certificate authorities, certificate lifecycle management, issuance, renewal, revocation, and governance.
• Manage digital certificates supporting users, devices, applications, servers, network infrastructure, and cloud services.
• Support certificate-based authentication, passwordless authentication, and device trust technologies across enterprise platforms.
• Partner with Network Engineering teams to support secure wired, wireless, VPN, remote access, and device authentication services.
• Monitor identity, authentication, PKI, and NAC platform health while proactively identifying and addressing operational issues.
• Develop automation using PowerShell, Microsoft Graph, and related technologies to improve provisioning, governance, monitoring, and reporting processes.
• Build and maintain operational dashboards, metrics, and reporting related to identity health, access governance, compliance, and platform performance.
• Support compliance, audit, and regulatory requirements through evidence collection, reporting, and control validation.
• Partner with Cybersecurity teams to implement secure identity controls aligned with Zero Trust principles and enterprise security standards.
• Participate in incident response, root cause analysis, and remediation activities related to identity, authentication, and access management services.
• Create and maintain technical documentation, architecture diagrams, operational runbooks, and support procedures.
• Evaluate emerging identity, authentication, PKI, and access management technologies and recommend improvements that enhance security, scalability, and user experience.
• Provide technical guidance and mentorship to IT teams and application owners regarding identity and access management best practices.

Qualifications

• Bachelor's degree in Information Technology, Computer Science, Information Systems, Cybersecurity, or a related field, or equivalen