> Markdown version of [/jobs/ext/2695954-manager-it-security-engineering-iam](https://www.wearedevelopers.com/jobs/ext/2695954-manager-it-security-engineering-iam). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Manager, IT Security Engineering, IAM

- **Company:** Gilead Sciences Inc.
- **Location:** San Mateo, CA, United States
- **Experience:** Expert
- **Salary:** $146,540.0 - $189,640.0
- **Contract:** Permanent contract
- **Skills:** Active Directory, Cloud Computing, Cloud Computing Security, Cyber Security, Data Security, Identity and Access Management, Lightweight Directory Access Protocols (LDAP), Role-Based Access Control, Information Technology, SailPoint, GXP
- **Published:** September 3, 2026
- **Apply:** https://www.techcareers.com/job.asp?id=3375511019&tx=JK7569FFJ&pt=1&aff=0B19D771-A501-4A5E-8338-2A822B784D54&utm_source=Job%20Feed&utm_medium=textkernel&utm_campaign=DE&utm_term=0B19D771-A501-4A5E-8338-2A822B784D54

## About the Role

* Bachelor's degree plus 6+ years of IT and/or Information Security experience.
 * Strong experience owning and operating IAM governance and control functions, including certification and RBAC at enterprise scale.
 * Hands-on experience with IAM platforms such as SailPoint IdentityIQ, SailPoint Identity Security Cloud, or Saviynt.
 * Deep experience with access certification programs, RBAC design, and identity lifecycle governance.
 * Understanding of regulatory-driven IAM controls, including DOJ DSP, GxP, and 21 CFR Part 11.
 * Experience leading IAM operations and service delivery in complex, hybrid enterprise environments.
 * Working knowledge of directory services (Active Directory, LDAP) and application integration patterns.

Preferred Skills

 * Experience in pharmaceutical, biotech, or life sciences environments.
 * Familiarity with evolving access control models (e.g., ABAC) and modern IAM architectures.
 * Experience supporting regulatory audits and control validation activities.
 * Broad knowledge of enterprise IT systems, cloud platforms, and application architectures.

## Description

* Owns enterprise IAM control effectiveness, ensuring identity governance, certification, and access controls are consistently enforced, measurable, and audit-ready across systems and data domains.
 * Leads and governs DOJ Data Security Program (DSP) IAM controls, including definition, implementation, and ongoing validation of access restrictions protecting sensitive and regulated data.
 * Drives and matures access certification programs, including campaign strategy, execution oversight, reviewer accountability, exception governance, and remediation enforcement.
 * Owns role-based access control (RBAC) strategy and execution, including role engineering, role lifecycle management, and alignment to least privilege and compliance requirements.
 * Establishes and enforces standardized access models and certification scope across enterprise and cloud applications, ensuring consistency and scalability.
 * Oversees identity lifecycle management (joiner, mover, leaver) as a controlled process, ensuring timely and accurate provisioning aligned with authoritative data sources and governance policies.
 * Provides leadership over IAM operations, including access request fulfillment, incident/problem management, and operational issue resolution across integrated platforms.
 * Acts as service owner for IAM platforms, accountable for availability, performance, control enforcement, and continuous service improvement.
 * Manages managed service providers and vendors supporting IAM, including defining SLAs/KPIs, monitoring performance, and enforcing delivery accountability.
 * Drives onboarding of applications into IAM platforms with a focus on RBAC alignment, certification inclusion, and governance standardization, reducing control gaps.
 * Ensures IAM processes and controls support audit, compliance, and regulatory readiness, including GxP and 21 CFR Part 11 requirements.
 * Partners with Security, Architecture, and business stakeholders to evolve IAM control frameworks and improve governance effectiveness across the enterprise.
 * Identifies and implements improvements to IAM processes, tools, and operating models to enhance control maturity, operational efficiency, and scalability.


## Related Videos

- [Blueprints for Success: Steering a Global Data & AI Architecture](https://www.wearedevelopers.com/videos/1577-blueprints-for-success-steering-a-global-data-ai-architecture)
- [Crypto-secure Data Management with In-Database Blockchain](https://www.wearedevelopers.com/videos/632-crypto-secure-data-management-with-in-database-blockchain)
- [How to govern Vibe Coding for the Enterprise](https://www.wearedevelopers.com/videos/100290-how-to-govern-vibe-coding-for-the-enterprise)
- [Web-based Information Visualization](https://www.wearedevelopers.com/videos/84-web-based-information-visualization)
- [Our GitOps approach for deploying an Identity Provider and an API Gateway in a SaaS company](https://www.wearedevelopers.com/videos/776-our-gitops-approach-for-deploying-an-identity-provider-and-an-api-gateway-in-a-saas-company)
- [Organizational Change Through The Power Of Why - DevSecOps Enablement](https://www.wearedevelopers.com/videos/478-organizational-change-through-the-power-of-why-devsecops-enablement)

## Related Articles

- [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)
- [Why SmartGit Is More Than a Git Client](https://www.wearedevelopers.com/magazine/689-why-smartgit-is-more-than-a-git-client)
- [Got AI ideas but no money? Here are 10 free ways to level up your AI skills with Google Cloud](https://www.wearedevelopers.com/magazine/600-got-ai-ideas-but-no-money-here-are-10-free-ways-to-level-up-your-ai-skills-with-google-cloud)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)