Sr. Manager - IT

The Senior Manager, IT owns the day-to-day delivery of the security and infrastructure services that support Genetix’s commercial products. You will lead identity, endpoint, backup and recovery, network, and cloud operations during a period of active modernization, including a move of identity services toward Microsoft Entra, a rebuild of backup and DR, and hardening of both corporate and laboratory environments. This is a hands-on leader who can run projects through change control in a validated, regulated environment, manage vendors, and build a team and operating rhythm that is secure, auditable, and reliable., Identity & Access

• Lead identity modernization across Microsoft Entra ID, Okta, and hybrid Active Directory, including SSO migrations for business applications, conditional access, MFA coverage, and authentication policy.
• Own privileged access: PIM, admin role reduction, service account de-privileging and lifecycle (inventory, owner, expiry, rotation), and stale account cleanup.
• Run access governance and least-privilege role design for business applications, with timely provisioning and deprovisioning for employees, contractors, consultants, and managed service providers.
• Own the AD security backlog, directory sync health (Entra Connect), and Group Policy migration to Intune.

Infrastructure, Backup & Cloud

• Operate core infrastructure: AWS (multi-account, federated access, networking), on-prem and virtualized servers, firewalls and VPN, and legacy file services.
• Build and run backup and recovery, including backup platform deployment, network paths to cloud targets, restore testing, retention, and data archiving.
• Lead patching and lifecycle: OS and application patching, server and client end-of-life, and scheduled outage coordination.
• Manage DNS and domain hygiene, including verification records, decommissioned records, and legacy domain consolidation, to reduce attack surface.
• Lead monitoring and observability, including tool replacement and alerting tied to incident response.

Endpoint, Lab & Security Operations

• Own endpoint and lab security: disk encryption and Secure Boot compliance, endpoint management, DNS-layer protection, patch policy for lab and corporate systems, and removal of retired tools.
• Own intake and triage of security reports, including phishing submissions and external vulnerability disclosures, with defined response and closure.
• Support audits and customer or partner security assessments (GxP, 21 CFR Part 11, SOX, SOC 2), including questionnaires, evidence collection, and remediation tracking.

Validated Systems & Change Control

• Partner with Quality and application owners on infrastructure for validated systems (LIMS/ELN, statistical computing, lab instruments), including server builds, security hot fixes, non-production testing, regression sign-off, and change control.
• Support commercial and partner-facing systems and treatment center security and connectivity requirements.

Team, Vendors & Delivery

• Lead, coach, and develop engineers and analysts; set priorities and manage workload across projects and service requests.
• Manage managed service providers and vendors (SLAs, contracts, performance, escalation).
• Define SLAs and reporting for security and infrastructure requests, and improve intake, approval, and onboarding workflows with the service desk.
• Write runbooks, SOPs, and change records so operations are repeatable and audit-ready.
• Apply AI tools such as Claude in daily work, including integrations with enterprise systems, and champion responsible AI adoption with appropriate access controls.

• Bachelor’s degree in IT, Computer Science, Information Security, or a related field, or equivalent practical experience.
• 8+ years in IT infrastructure, security operations, or systems engineering, including 3+ years leading people or technical teams.
• Hands-on identity experience: Entra ID and hybrid Active Directory required; Okta or another SSO platform strongly preferred. Includes conditional access, MFA, PIM, and service account governance.
• Hands-on experience with endpoint management (Intune), disk encryption, patching, and vulnerability management.
• Experience with backup and recovery platforms, cloud networking (AWS preferred), firewalls and VPN, and Microsoft 365.
• Experience managing projects through formal change control and managing vendors.
• Experience supporting audits or compliance programs in a regulated environment.
• Working knowledge of AI tools such as Claude (or similar) applied to operations.
• Strong communication skills, risk-based decision making, and the ability to prioritize competing demands in a small, fast-moving team.

Preferred

• Biotech, pharma, or GxP experience, including computer system validation and supporting lab systems and instrumentation.
• Experience modernizing hybrid environments (IdP migrations, GPO to Intune, monitoring replacement, legacy domain consolidation).
• Security or infrastructure certifications (e.g., CISSP, CISM, Security+, AWS Security Specialty, Microsoft identity/security certifications).
• Experience in a company that is rebuilding or scaling its IT function.

At Genetix Biotherapeutics every role has meaning, every team member is respected, and every day is a chance to make a difference. When you join Genetix, you’re not just landing a new role, you become part of a company that’s pursuing curative gene therapies to give patients and their families more days. We are doers, thinkers and collaborators who embrace and live by our values:

Our innovation is rooted in the diversity of our teams and results are achieved through cooperation and the integration of multiple viewpoints. This is personal and we approach every challenge with radical care. This role is based in Somerville, MA and follows a hybrid schedule of three days onsite per week. To support regular in-office collaboration, only candidates within commuting distance of Somerville will be considered.