Associate Director, Identity & Access Management Architect

Job description

Overview: Alnylam is seeking an Associate Director, Identity & Access Management Architect to lead the architecture, engineering, and delivery of identity services across the enterprise. The role brings together identity governance and admiration (IGA), privileged access management (PAM), authentication, directory services, cloud identity, and non-human identities to support secure access for our people, applications, and technology. Reporting to the Senior Director, Head of Identity and Access Management, this leader will own IAM architecture and engineering and provide technical ownership of IGA, PAM, Active Directory, Microsoft Entra ID, and hybrid identity. The role combines strategic direction with hands-on technical execution, working with engineering. infrastructure and business teams to design, modernize, troubleshoot, and operate resilient identity capabilities. This is a hybrid role primarily based in Cambridge, MA, with up to 25% local and international travel. Key Responsibilities: • Define and own the enterprise IAM target architecture, technical standards, integration patterns, roadmap across IGA, PAM, access management, directory services, cloud, and non-human identity. • Lead identity solution design and engineering execution from architecture review and proof of concept through implementation, testing, operational handoff, and ongoing improvement. • Own the technical direction of Active Directory, Entra ID, and hybrid identity, including tenant and directory architecture, synchronization, authentication, groups, privileged administration, and service resilience. • Drive directory modernization and security, including legacy authentication reduction, Tier 0 protection, hardening, recovery, and complex migration or incident support. • Architect, design, implement and rollout identity lifecycle and governance capabilities, including joiner, mover, and leaver processes; automated provisioning; birthright access; role models; access reviews; and application onboarding through SailPoint and related integrations. • Define PAM architecture for privileged account discovery, credential vaulting and rotation, session controls, just-in-time access, emergency access, and integration with directory and governance platforms. • Establish access management standards for SSO, MFA, phishing-resistant and passwordless authentication, federation, and Conditional Access using appropriate modern protocols. • Define secure identity patterns for cloud workloads, service accounts, service principals, secrets, certificates, APIs, and AI agents, including ownership, least privilege, and lifecycle controls. • Partner with Cybersecurity, Infrastructure, Cloud, Applications, Data and AI, and Enterprise Architecture to address identity risk, strengthen detection and response, and embed Zero Trust principles. • Drive automation and reusable engineering practices; mentor IAM and directory engineers and serve as a technical escalation point for complex identity issues. Qualifications: •