Senior Manager, Authentication Engineer

Role Responsibilities

• Develop and execute an Authentication strategy; drive SSO adoption and improve identity management.
• Oversee design, implementation, and optimization of SSO/MFA framework (scalable, resilient, integrated with internal and third-party/cloud services).
• Collaborate with IT/security/development/product to integrate SSO/MFA into platforms; provide secure access best practices.
• Ensure security and compliance alignment (e.g., GDPR, HIPAA, NIST); lead security controls for authentication/authorization.
• Evaluate and select identity tools (SSO, MFA, federation); manage vendor/third-party relationships.
• Lead incident investigation and resolution for SSO/MFA; implement improvements to prevent recurrence.
• Improve end-user experience by simplifying login while maintaining security.
• Define and report KPIs for SSO performance, security metrics, breaches, and engagement.

• Bachelor’s degree.
• 6+ years in IAM; 4+ years focused on SSO; IAM/authentication/security background supporting SSO for 50,000+ users.
• Expertise in SSO technologies (SAML, OAuth, OpenID Connect); federation, MFA, cloud IAM; experience with Okta/Azure AD/Ping.
• Ability to solve complex authentication/authorization problems in global environments.
• Knowledge of security best practices (encryption, tokenization, secure protocols).
• Experience leading IAM support/engineering/operations teams in a global business unit.
• Understanding of SOX and GXP regulations; accountable leadership on long-term complex projects.
• Agile experience; collaborative, adaptable, proactive problem-solving.

• Master’s degree; deep expertise in Ping Identity.

Eligible for Pfizer Global Performance Plan bonus (17.5% target) and share-based long-term incentives; 401(k) match/retirement contribution; paid vacation/holidays/personal days; paid caregiver/parental and medical leave; medical/prescription/dental/vision coverage.