Hybrid Senior Staff IT Architect, Identity & Access Management

at Thermo Fisher Scientific

• Job title: Senior Staff IT Architect, Identity & Access Management
• Job type: Full Time
• Experience level: Senior
• Salary: $143,000 - $190,650 per year
• Degree requirement: Bachelor's Degree
• Tech skills: DNS, ServiceNow
• Location requirements: Hybrid, Frederick, United States

About the role

• Senior Staff IT Architect leading the Federation Services pillar within IAM at Thermo Fisher Scientific. Responsible for the design and governance of identity-driven access for 140,000 employees and thousands of applications.

Responsibilities

• Provide strategic leadership for the design, implementation, and governance of the Federation Services pillar within IAM
• Develop and maintain a comprehensive roadmap aligned with organizational priorities and industry best practices
• Effectively communicate and demonstrate the value of IAM and Federation services to stakeholders at all levels of the organization
• Develop and track metrics that demonstrate the health, stability, and business value of the Federation service
• Ensure service availability and compliance with security and regulatory requirements
• Ensure IAM solutions meet business security and regulatory requirements
• Drive engineering efforts for IAM integrations across enterprise platforms
• Collaborate with vendors and evaluate technologies to strengthen Federation services
• Partner with cross-functional teams to design and maintain efficient, scalable programs

Requirements

• Bachelor’s degree in computer science, Information Systems, or related field (or equivalent experience)
• Expertise in enterprise SSO technologies (SAML 2.0, OpenID Connect, etc.) and identity solutions like Entra ID
• Familiarity with user provisioning (SCIM), Active Directory, and application authorization models
• Confidence in managing an Entra ID Conditional Access chain of moderate complexity, including documenting, requesting, testing, and performing changes to the chain as IT security requirements evolve
• Knowledge of application deployment best practices, including hosting, DNS, SSL, and session cookies
• Experience deploying SaaS and on-premise applications
• Strong troubleshooting skills for web applications and SSO issues
• Proficiency with scripting (PowerShell) and exposure to software development
• Knowledge of ServiceNow automation and change management processes
• Experience with AI-powered development tools (e.g., GitHub Copilot)
• Excellent communication and collaboration skills

Benefits

• A choice of national medical and dental plans, and a national vision plan, including health incentive programs
• Employee assistance and family support programs, including commuter benefits and tuition reimbursement
• At least 120 hours paid time off (PTO), 10 paid holidays annually, paid parental leave (3 weeks for bonding and 8 weeks for caregiver leave), accident and life insurance, and short- and long-term disability in accordance with company policy
• Retirement and savings programs, such as our competitive 401(k) U.S. retirement savings plan
• Employees’ Stock Purchase Plan (ESPP) offers eligible colleagues the opportunity to purchase company stock at a discount