Specialist IDM IS Architect

About Amgen

Amgen harnesses the best of biology and technology to fight the world's toughest diseases, and make people's lives easier, fuller and longer. We discover, develop, manufacture and deliver innovative medicines to help millions of patients. Amgen helped establish the biotechnology industry more than 40 years ago and remains on the cutting-edge of innovation, using technology and human genetic data to push beyond what's known today.

About The Role

Role Description :

Amgen is seeking a Specialist IDM IS Architect to provide deep technical expertise in designing, implementing, and optimizing our Customer Identity and Access Management (CIAM) platform. The role is responsible for developing and maintaining secure, scalable and reliable identity solutions leveraging PingOne Advanced Identity Cloud and PingOne Protect, integrated with modern applications and cloud services of the organization. This role involves defining the architecture vision, creating roadmaps, and ensuring that IT strategies align with business goals. You will be working closely with stakeholders to understand requirements, develop architectural blueprints, and ensure that solutions are scalable, secure, and aligned with enterprise standards. Architects will be involved in defining the enterprise architecture strategy, guiding technology decisions, and ensuring that all IT projects adhere to established architectural principles.

The successful candidate will bring strong hands-on technical architecture skills, proven experience in identity platforms, and the ability to collaborate across IS, Security, and business teams to deliver advanced CIAM capabilities that protect our customers and elevate user experience.

This role focuses on  solution architecture ,  integration , and  technical execution  across enterprise CIAM initiatives, ensuring adherence to  compliance ,  performance , and  security  standards

Roles & Responsibilities :

• CIAM Solution Architecture : Design and deliver secure, scalable IAM / CIAM solutions using PingOne Advanced Identity Cloud and PingOne Protect, ensuring alignment with enterprise security and compliance requirements.
• IAM Policy Management : Configure and manage IAM policies within PingOne to control access securely, implementing role-based access control (RBAC) and least-privilege models.
• Authentication & MFA : Define and enforce robust authentication mechanisms, including Multi-Factor Authentication (MFA), adaptive authentication, and risk-based access to strengthen security posture.
• Identity Lifecycle Management : Lead end-to-end identity lifecycle governance, including provisioning, deprovisioning, role assignments, and access reviews. Establish scalable patterns for delegated administration, entitlement modeling, and policy-as-code.
• SSO & Federation : Develop and manage Single Sign-On (SSO) and federated identity configurations with PingOne for seamless access across internal, partner, and SaaS applications.
• Standards & Protocol Compliance : Ensure compliance with SAML 2.0, OAuth 2.0, and OpenID Connect (OIDC) for secure authentication and authorization.
• PingOne Protect Policy Integration : Create, tune, and maintain PingOne Protect risk / fraud policies and integrate them into PingOne Advanced Identity Cloud Journeys for adaptive experiences such as silent risk checks and step-up MFA.
• Threat Monitoring & Incident Response : Continuously monitor the PingOne environment for anomalies, unauthorized access attempts, and security threats. Define logging, telemetry, and alerting strategies; integrate with SIEM / SOAR for detection and response.
• Integration Architecture : Oversee integration patterns for PingOne APIs / SDKs, identity events, and CI / CD automation. Partner with product teams to onboard applications and standardize app registration, client lifecycle, and policy deployment.
• Security & Compliance : Ensure identity solutions comply with GDPR, CCPA, HIPAA, and industry best practices. Collaborate with InfoSec to enhance threat detection, fraud prevention, and account protection.
• Performance & Resilience : Define and enforce SLIs / SLOs, capacity planning, and resiliency patterns (HA / DR, retries, backoff). Lead troubleshooting and optimization for performance, reliability, and scalability.
• Documentation & Standards : Produce reference architectures, solution designs, and technical standards for CIAM implementations across regions.
• Agile Collaboration & Leadership : Partner with Product Owners, Scrum Masters, and business stakeholders in Agile ceremonies. Provide architecture oversight and mentorship to engineering teams for consistent, high-quality delivery.
• Vendor & Technology Engagement : Collaborate with Ping Identity and cloud providers; track roadmaps and emerging features and recommend enhancements to Amgen's CIAM platform.

Basic Qualifications and Experience :

GCF Level 5A

Functional Skills :

Must-Have Skills (Not More Than 3 To 4)

IDM Architect

Good-to-Have Skills :

Professional Certifications (please mention if the certification is preferred or mandatory for the role) :

Soft Skills :

EQUAL OPPORTUNITY STATEMENT

Amgen is an Equal Opportunity employer and will consider you without regard to your race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, or disability status.

We will ensure that individuals with disabilities are provided with reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.

Skills Required

saml 2.0 , Single Sign-On, Integration Architecture