4 days ago
Base Salary
$115k - $264k/yr
Responsibilities
- Lead the multi-year enterprise identity roadmap and technical strategy, aligning IGA architecture with global security and zero-trust frameworks.
- Establish enterprise architecture patterns, engineering standards, and reusable identity, cloud, and infrastructure frameworks.
- Architect and oversee globally distributed, enterprise-scale SailPoint EIM deployments.
- Develop complex identity connectors, custom rules, integrations, and automated workflows using Java and Python.
- Lead identity integrations across multi-cloud environments and troubleshoot issues spanning APIs, connectors, applications, directories, and provisioning systems.
- Mentor senior engineers and solution architects, conduct architecture reviews, lead Tier 4 escalations, and perform root-cause analysis for systemic issues.
- Translate security and regulatory requirements into executive-level technical strategies and lead cross-functional identity transformations.
Requirements
- Minimum 8–10 years of hands-on engineering experience in cybersecurity and identity management, including at least 5 years at an enterprise architecture or principal level.
- At least 5 years steering identity strategies in highly regulated, multinational enterprise environments; healthcare or finance experience is preferred.
- Deep expertise in SailPoint IdentityNow and IdentityIQ, including enterprise-scale design, custom development, performance tuning, and global deployment.
- Expert proficiency in Java and Python.
- Experience architecting integrations across AWS, Azure, and GCP, with familiarity with CI/CD pipelines, DevOps methodologies, and microservices.
- Ability to communicate complex technical concepts to nontechnical stakeholders and lead distributed global engineering teams autonomously.
- Bachelor’s or advanced degree in Computer Science, Cyber Security, Information Technology, or a related field; a master’s degree is preferred.
- CISSP, CISM, or CIAM certification is strongly preferred.
- Advanced AWS, Azure, GCP architecture, or SailPoint certifications are highly desirable.
Benefits
- The position is onsite in South San Francisco, California.
- Relocation benefits are not available.
- A discretionary annual bonus may be available based on individual and company performance.
- The position qualifies for the company benefits described in the posting.
About Genentech
Genentech discovers, develops, and commercializes biologic therapies for serious diseases across oncology, immunology, neuroscience, ophthalmology, infectious disease, and metabolism. Founded in 1976 and headquartered in South San Francisco, it operates as a member of the Roche Group, with research centered in its gRED organization and revenue driven by prescription drug sales and collaborations.