Senior Manager, Directory Engineer
Listed on 2026-08-22
-
IT/Tech
Cybersecurity, IT Project Manager
ROLE SUMMARY
Pfizer’s Identity Security and Access Management (ISAM) organization delivers seamless, secure, modern, and scalable identity solutions for all platforms and identity types. Our mission is to design, implement, and maintain a centralized, modern, and scalable Identity Security and Access Management (ISAM) ecosystem that secures digital assets across all platform and identity types, improves end-user experiences and strengthens our overall security posture, while maintaining compliance with global regulatory requirements.
We achieve this mission through a combination of world‑class talent, top‑tier technologies and industry leading best practices The Senior Manager of Directory Services is responsible for the strategic direction, engineering, operations, and lifecycle management of the organization’s enterprise directory infrastructure. This leader oversees Microsoft Active Directory, Microsoft Entra (Azure AD), LDAP directories, DNS, Group Policy, PKI integration, identity synchronization, and hybrid identity platforms supporting business‑critical applications and authentication services.
The role ensures highly available, secure, scalable directory services that support enterprise authentication, authorization, endpoint management, and identity lifecycle while partnering closely with Cybersecurity, Authentication Services, Infrastructure, Cloud Engineering, End User Computing, and Application teams.
Strategy & Leadership:
Develop and execute the enterprise directory services roadmap to ensure secure and user‑friendly access across all enterprise applications and platforms.
Modernize legacy directory infrastructure.
Establish standards for directory design and governance while ensuring scalability, resiliency, and high availability.
Lead directory consolidation and migration initiatives.
Directory Architecture & Design:
Oversee the design, implementation, and ongoing optimization of Directory services. Ensure it is scalable, resilient, and integrated with both internal and third‑party services.
Cross‑Functional
Collaboration:
Work closely with cross‑functional teams including IT, security, development, and product teams to ensure seamless directory capabilities into new and existing platforms. Provide guidance on best practices for secure access management.
Security & Compliance:
Maintain a strong understanding of security protocols and compliance standards (e.g., GDPR, HIPAA, NIST) and ensure that directory solutions align with relevant regulations and industry standards. Lead the development and implementation of security controls related to authentication and authorization.
Vendor & Tool Selection:
Manage relationships with vendors and third‑party providers, ensuring successful product implementation and ongoing support.
Incident Management & Troubleshooting:
Lead the team in investigating and resolving any issues related to directory functionality. Ensure that incidents are managed efficiently, and improvements are implemented to minimize future disruptions.
User Experience Focus:
Ensure that directory implementation improves the end‑user experience by simplifying login processes while maintaining high‑security standards. Work on reducing friction points and increasing user adoption.
Metrics & Reporting:
Help develop key performance indicators (KPIs) for directory performance and security metrics. Regularly report on directory effectiveness, user engagement, security breaches, and other relevant metrics.
Bachelor’s degree in relevant discipline.
6+ years of experience in identity and access management, with at least 4 years focused on Directory solutions.
Strong background in IT security, authentication protocols, and IAM frameworks supporting directories with greater than 50,000 users.
Deep understanding of Directory technologies (e.g., LDAP/LDAPS, Directory schema, replication, and GPOs) and experience with PKI solutions.
Knowledge of identity providers like Microsoft AD, AD LDS and Azure AD.
Able to solve highly complex authentication and authorization problems within a Global environment.
Strong understanding of security best practices related to…
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).