> Markdown version of [/jobs/ext/4414853-sr-manager-it](https://www.wearedevelopers.com/jobs/ext/4414853-sr-manager-it). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Sr. Manager - IT - **Company:** Bluebird Bio, Inc. - **Location:** Boston, MA, United States - **Experience:** Expert - **Salary:** $170,000.0 - $185,000.0 - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Active Directory, Artificial Intelligence, Amazon Web Services, Systems Engineering, Business Software, Cloud Computing, CompTIA Security+, Cyber Security, Scientific Data Archiving, Domain Name System (DNS), Multi-Factor Authentication, Identity and Access Management, Virtual Private Networks (VPN), Laboratory Information Management Systems, Azure Active Directory, Anti-Phishing, Computational Statistics, System Testing, Systems Integration, Software Vulnerability Management, Enterprise Software Applications, Okta, Firewalls (Computer Science), Microsoft InTune, Information Technology, Claude, U-Boot, GXP - **Published:** October 25, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=f3079af52f4ee86c ## About the Role * Bachelor's degree in IT, Computer Science, Information Security, or a related field, or equivalent practical experience. * 8+ years in IT infrastructure, security operations, or systems engineering, including 3+ years leading people or technical teams. * Hands-on identity experience: Entra ID and hybrid Active Directory required; Okta or another SSO platform strongly preferred. Includes conditional access, MFA, PIM, and service account governance. * Hands-on experience with endpoint management (Intune), disk encryption, patching, and vulnerability management. * Experience with backup and recovery platforms, cloud networking (AWS preferred), firewalls and VPN, and Microsoft 365. * Experience managing projects through formal change control and managing vendors. * Experience supporting audits or compliance programs in a regulated environment. * Working knowledge of AI tools such as Claude (or similar) applied to operations. * Strong communication skills, risk-based decision making, and the ability to prioritize competing demands in a small, fast-moving team. Preferred * Biotech, pharma, or GxP experience, including computer system validation and supporting lab systems and instrumentation. * Experience modernizing hybrid environments (IdP migrations, GPO to Intune, monitoring replacement, legacy domain consolidation). * Security or infrastructure certifications (e.g., CISSP, CISM, Security+, AWS Security Specialty, Microsoft identity/security certifications). * Experience in a company that is rebuilding or scaling its IT function. ## Description The Senior Manager, IT owns the day-to-day delivery of the security and infrastructure services that support Genetix's commercial products. You will lead identity, endpoint, backup and recovery, network, and cloud operations during a period of active modernization, including a move of identity services toward Microsoft Entra, a rebuild of backup and DR, and hardening of both corporate and laboratory environments. This is a hands-on leader who can run projects through change control in a validated, regulated environment, manage vendors, and build a team and operating rhythm that is secure, auditable, and reliable., Identity & Access * Lead identity modernization across Microsoft Entra ID, Okta, and hybrid Active Directory, including SSO migrations for business applications, conditional access, MFA coverage, and authentication policy. * Own privileged access: PIM, admin role reduction, service account de-privileging and lifecycle (inventory, owner, expiry, rotation), and stale account cleanup. * Run access governance and least-privilege role design for business applications, with timely provisioning and deprovisioning for employees, contractors, consultants, and managed service providers. * Own the AD security backlog, directory sync health (Entra Connect), and Group Policy migration to Intune. Infrastructure, Backup & Cloud * Operate core infrastructure: AWS (multi-account, federated access, networking), on-prem and virtualized servers, firewalls and VPN, and legacy file services. * Build and run backup and recovery, including backup platform deployment, network paths to cloud targets, restore testing, retention, and data archiving. * Lead patching and lifecycle: OS and application patching, server and client end-of-life, and scheduled outage coordination. * Manage DNS and domain hygiene, including verification records, decommissioned records, and legacy domain consolidation, to reduce attack surface. * Lead monitoring and observability, including tool replacement and alerting tied to incident response. Endpoint, Lab & Security Operations * Own endpoint and lab security: disk encryption and Secure Boot compliance, endpoint management, DNS-layer protection, patch policy for lab and corporate systems, and removal of retired tools. * Own intake and triage of security reports, including phishing submissions and external vulnerability disclosures, with defined response and closure. * Support audits and customer or partner security assessments (GxP, 21 CFR Part 11, SOX, SOC 2), including questionnaires, evidence collection, and remediation tracking. Validated Systems & Change Control * Partner with Quality and application owners on infrastructure for validated systems (LIMS/ELN, statistical computing, lab instruments), including server builds, security hot fixes, non-production testing, regression sign-off, and change control. * Support commercial and partner-facing systems and treatment center security and connectivity requirements. Team, Vendors & Delivery * Lead, coach, and develop engineers and analysts; set priorities and manage workload across projects and service requests. * Manage managed service providers and vendors (SLAs, contracts, performance, escalation). * Define SLAs and reporting for security and infrastructure requests, and improve intake, approval, and onboarding workflows with the service desk. * Write runbooks, SOPs, and change records so operations are repeatable and audit-ready. * Apply AI tools such as Claude in daily work, including integrations with enterprise systems, and champion responsible AI adoption with appropriate access controls.