Senior IT​/Security Engineer

USDM Life Sciences is a premier consulting company with 20+ years of experience assisting heavily regulated biotech, medical device, and pharmaceutical companies with their GxP technologies to accelerate growth. Our deep domain knowledge and technology expertise in life sciences business processes are what set us apart. From strategy to implementation and adoption, we have delivered thousands of GxP projects globally.

As part of the USDM team, you have the opportunity to work with cutting-edge technologies through our many partnerships with companies like Microsoft, Google, Oracle, Docu Sign, Box, and many more. From molecule to market, you will help connect technology, people, and data in new ways to generate real-time insights to improve business outcomes for USDM’s clients. Are you ready to make an impact and drive real digital transformation in life sciences?

Founded in Santa Barbara in 1999, USDM has grown to a progressive, global company with 300+ remote employees and offices throughout the US, Canada, and Germany.

Nature and Scope of Job

Senior IT / Security Engineer will drive the execution of IT, information security, and GxP computerized-systems projects. Resource will take prioritized initiatives from the IT & Security roadmap(s) and deliver them end-to-end: planning, coordinating stakeholders and vendors, implementing, validating, documenting, and handing off to steady-state operations. This is a high-capacity, high-output role. Your job is to turn business decisions and objectives into shipped, well-documented outcomes—often several at a time.

Project management and communication skills are weighted equally with technical skills.

Primary Responsibilities

Project Management & Delivery

• Run multiple concurrent IT and security projects end-to-end: define scope and success criteria with the Associate Director, build the plan, track dependencies and risks, and drive to completion on schedule.
• Maintain a transparent project portfolio in Jira/Confluence with clear owners, dates, and status; publish concise weekly status updates and elevate blockers early with recommended options.
• Coordinate vendors, MSP/MSSP partners, and consultants on assigned projects; track deliverables against statements of work and hold partners accountable.
• Produce clean, reusable project artifacts: requirements, designs, test evidence, runbooks, and handoff documentation.

Technical Implementation

• Implement and configure identity and access controls on Okta or Microsoft Entra /MFA rollouts, SCIM provisioning, conditional access policies, and access-review cycles.
• Deploy and maintain endpoint management and security for macOS and Windows: MDM enrollment, EDR (e.g., Crowd Strike, Microsoft Defender), hardening baselines, and patch/vulnerability remediation.
• Execute cloud and SaaS work streams in Microsoft 365, Azure/AWS, and Google Workspace: security configuration, DLP/information protection, backup, and integrations.
• Support network and site infrastructure projects (LAN/WLAN, firewalls, VPN/ZTNA) for the Palo Alto, Switzerland, and future campuses.
• Automate repetitive work with scripting (Power Shell, Python) and APIs; document what you build.

Security Operations Support

• Triage and investigate security alerts from the SIEM/EDR; execute incident response procedures and document findings; coordinate with the MSSP as directed.
• Run the vulnerability remediation cycle: track findings, drive owners to closure, and report progress.
• Complete vendor security assessments and customer/partner security questionnaires.

GxP Compliance & Computerized System Validation

• Execute validation activities for GxP cloud and SaaS systems using risk-based principles (GAMP 5 / CSA) in compliance with 21 CFR Part 11 and EU Annex 11.
• Author and maintain…