• Key Responsibilities:
• Lead the architecture, implementation, and governance of enterprise-grade identity and access management (IAM) solutions in AWS and Azure, ensuring alignment with security best practices and compliance requirements (e.g., NIST, ISO, SOX).
• Drive the IAM strategy for cloud transformation initiatives, including the adoption of Zero Trust, Role-Based Access Control (RBAC), and least privilege models.
• Provide technical direction and leadership to IAM engineering teams, ensuring consistent application of IAM principles, standards, and reusable patterns across platforms.
• Design and oversee complex identity solutions addressing federation, authentication/authorization, directory services (Active Directory, Azure AD), SSO (SAML/OIDC), MFA, lifecycle management, and privileged access management (PAM).
• Champion automation-first IAM processes using infrastructure as code (IaC) tools like Terraform and CloudFormation, driving adoption of DevSecOps best practices across teams.
• Partner with application, infrastructure, and security teams to enable secure business processes and improve developer productivity by integrating IAM patterns into CI/CD pipelines.
• Perform IAM risk assessments and vulnerability remediations to continuously enhance the security posture of cloud identities and entitlements.
• Mentor and develop IAM engineers, establishing best practices and building an agile, high-performing team with a culture of continuous learning and improvement.
• Required Skills & Experience:
• 10+ years of experience in IAM, with at least 3+ years in a cloud-native IAM leadership role (preferably across AWS and Azure).
• Strong expertise in Azure AD, Azure B2B/B2C, MFA, ADFS, SSO, Conditional Access, and IAM policy design.
• Experience implementing Zero Trust and Just-In-Time (JIT) access strategies.
• Deep familiarity with DevOps toolchains (Azure DevOps, GitHub, Jenkins, Bitbucket, Docker) and scripting languages (Python, PowerShell, Bash).
• Strong background in Infrastructure as Code (IaC) using Terraform or CloudFormation.
• Proven ability to lead IAM automation initiatives to reduce manual work and improve time-to-value.
• Strong understanding of identity governance, audit and compliance, risk assessments, and third-party access controls.
• Experience managing IAM programs at scale in regulated industries (finance, healthcare) is a plus.
• Excellent communication, stakeholder management, and leadership skills.
• Preferred Certifications:
• Microsoft Certified: Identity and Access Administrator Associate
• AWS Certified Security – Specialty
• Certified Information Systems Security Professional (CISSP)
• Certified Identity and Access Manager (CIAM)
• Guide the adoption of IAM KPIs and dashboards for measuring access risk, provisioning times, policy violations, and identity lifecycle coverage.
• Engage in executive-level and client-facing discussions, presenting IAM architecture decisions, strategic roadmaps, and risk mitigations with clarity and confidence.

Why Novartis? Our purpose is to reimagine medicine to improve and extend people’s lives and our vision is to become the most valued and trusted medicines company in the world. How can we achieve this? With our people. It is our associates that drive us each day to reach our ambitions. Be a part of this mission and join us! Learn more here: http://www.novartis.com/about/strategy/people-and-culture

You’ll receive: You can find everything you need to know about our benefits and rewards in the Novartis Life Handbook. http://www.novartis.com/careers/benefits-rewards

Commitment to Diversity and Inclusion: Novartis is committed to building an outstanding, inclusive work environment and diverse teams' representative of the patients and communities we serve.

Join our Novartis Network: If this role is not suitable to your experience or career goals but you wish to stay connected to hear more about Novartis and our career opportunities, join the Novartis Network here: http://talentnetwork.novartis.com/network