Identity Management Engineer

About Astellas

Astellas is a global life sciences company committed to turning innovative science into VALUE for patients. We provide transformative therapies in disease areas that include oncology, ophthalmology, urology, immunology and women's health. Through our research and development programs, we are pioneering new healthcare solutions for diseases with high unmet medical need. Learn more at Astellas.com.

Are you driven to make a real difference in the lives of patients?

We're seeking passionate individuals who thrive in dynamic environments, embrace new ideas, and aren't afraid to take intelligent risks. People who act with unwavering integrity and are deeply committed to making a tangible impact.

Purpose and Scope:
As an Identity and Access Management (IAM) Engineer, you will play a key role in protecting our organization’s digital assets by ensuring secure, compliant, and efficient management of user identities and access across systems and applications. This position has been established as part of our initiative to strengthen internal IAM operations, enhance automation in identity lifecycle management, and advance towards a ‘best in industry’ access governance framework.

Responsibilities and Accountabilities:

• Execute and support daily IAM/PAM operations including user provisioning, de-provisioning, and access changes across Active Directory, Entra ID (Azure AD), ERP systems, and SaaS applications.
• Administer and maintain CyberArk PAS components including Vault, PVWA, CPM, and PSM, ensuring secure management of privileged accounts and credentials.
• Monitor and maintain the health, performance, and scheduled jobs of IAM/PAM platforms such as CyberArk and Entra ID, ensuring high availability and operational integrity.
• Manage service requests and incidents related to access control, authentication, and account lifecycle, resolving issues within defined SLAs.
• Troubleshoot and resolve authentication failures, access provisioning errors, and MFA/SSO-related issues across hybrid environments.
• Perform regular access reviews, entitlement clean-ups, and role-based access audits to enforce least privilege and meet compliance requirements.
• Support integration and synchronization of identity data between HR systems and IAM platforms, ensuring accurate and timely updates.
• Collaborate with SOC, Infrastructure, and HR teams to maintain secure and efficient identity lifecycle processes and respond to IAM-related security events.
• Escalate complex technical issues to engineering and architecture teams, contributing to root cause analysis and long-term remediation.
• Document recurring issues, configuration changes, and operational procedures, contributing to the internal knowledge base and support documentation. 
• Participate in change management activities including testing, validation, and deployment of IAM system upgrades, patches, and new feature rollouts.

Required Qualifications:

• Strong knowledge of Active Directory, Azure AD (Entra ID), and group policy administration.
• 8 to 10 years of experience in Identity and Access Management or related IT Security roles.
• Minimum 5 years of experience in administration of IAM solutions such as CyberArk, Entra ID etc.
• Hands-on experience with one or more IAM platforms (Entra ID, CyberArk, Azure SSO)
• Understanding of SSO, MFA, and authentication protocols (SAML, OAuth, OpenID Connect).
• Basic scripting experience (PowerShell, Python) for task automation.
• Understanding of identity lifecycle (joiner–mover–leaver) and access governance.

Preferred Qualifications:

• Strong knowledge of Active Directory, Azure AD (Entra ID), CyberArk, SSO, and authentication mechanisms (SAML, OAuth, OIDC).
• Understanding of IAM governance, RBAC, and compliance standards (ISO 27001, SOX, GDPR).
• IAM certifications such as below is an advantage.
  • CyberArk Defender (mandatory)
  • CyberArk Sentry
  • CyberArk CCDE - Core PAS
  • Microsoft Certified: Identity and Access Administrator Associate
    
• Supporting technology in healthcare industry experience is an advantage.
• Familiarity with ITSM tools (e.g., ServiceNow) and ticket management processes

Working Environment:

At Astellas we recognize the importance of work/life balance, and we are proud to offer a hybrid working solution allowing time to connect with colleagues at the office with the flexibility to also work from home. We believe this will optimize the most productive work environment for all employees to succeed and deliver. Hybrid work from certain locations may be permitted in accordance with Astellas’ Responsible Flexibility

What awaits you at Astellas? 

• Global collaboration: Become part of a connected global business of like-minded life science leaders, all dedicated to improving patients' lives worldwide. 
• Real-world patient impact: Contribute to transformative therapies that reach patients around the world, knowing your work makes a difference every day.
• Relentless Innovation: Join a company at the forefront of scientific breakthroughs, where you'll have the opportunity to shape the future of healthcare. 
• A Culture of Growth: Chart your own course within a supportive environment that values your contributions, champions your development, and empowers you to pursue your passions. 
  

Our Organizational Values and Behaviors

Values: Innovation, Integrity and Impact sit at the heart of what we do. 

Behaviors: We come together as ‘One Astellas’, working with courage and a sense of urgency. We are outcome focused and consistently take accountability for our personal contribution.