Associate Director, Identity & Access Management Architect

Alnylam is seeking an Associate Director, Identity & Access Management Architect to lead the architecture, engineering, and delivery of identity services across the enterprise. The role brings together identity governance and admiration (IGA), privileged access management (PAM), authentication, directory services, cloud identity, and non-human identities to support secure access for our people, applications, and technology.

Reporting to the Senior Director, Head of Identity and Access Management, this leader will own IAM architecture and engineering and provide technical ownership of IGA, PAM, Active Directory, Microsoft Entra ID, and hybrid identity. The role combines strategic direction with hands-on technical execution, working with engineering. infrastructure and business teams to design, modernize, troubleshoot, and operate resilient identity capabilities.

This is a hybrid role primarily based in Cambridge, MA, with up to 25% local and international travel.

• Define and own the enterprise IAM target architecture, technical standards, integration patterns, roadmap across IGA, PAM, access management, directory services, cloud, and non-human identity.
• Lead identity solution design and engineering execution from architecture review and proof of concept through implementation, testing, operational handoff, and ongoing improvement.
• Own the technical direction of Active Directory, Entra ID, and hybrid identity, including tenant and directory architecture, synchronization, authentication, groups, privileged administration, and service resilience.
• Drive directory modernization and security, including legacy authentication reduction, Tier 0 protection, hardening, recovery, and complex migration or incident support.
• Architect, design, implement and rollout identity lifecycle and governance capabilities, including joiner, mover, and leaver processes; automated provisioning; birthright access; role models; access reviews; and application onboarding through SailPoint and related integrations.
• Define PAM architecture for privileged account discovery, credential vaulting and rotation, session controls, just-in-time access, emergency access, and integration with directory and governance platforms.
• Establish access management standards for SSO, MFA, phishing-resistant and passwordless authentication, federation, and Conditional Access using appropriate modern protocols.
• Define secure identity patterns for cloud workloads, service accounts, service principals, secrets, certificates, APIs, and AI agents, including ownership, least privilege, and lifecycle controls.
• Partner with Cybersecurity, Infrastructure, Cloud, Applications, Data and AI, and Enterprise Architecture to address identity risk, strengthen detection and response, and embed Zero Trust principles.
• Drive automation and reusable engineering practices; mentor IAM and directory engineers and serve as a technical escalation point for complex identity issues.

• Bachelor's degree in computer science, cybersecurity, engineering, or a related field, or equivalent experience.
• 8+ years of progressive experience in IAM, identity engineering, Directory Services, or related technology disciplines, including 5+ years in architecture, engineering, or technical delivery roles with demonstrated responsibility for designing and implementing complex identity solutions.
• Experience delivering enterprise IAM solutions across IGA, PAM, access management, Active Directory, Entra ID, and hybrid or cloud identity.
• Deep hands-on AD and Entra ID expertise, including directory architecture, synchronization, authentication, Conditional Access, privileged roles, security hardening, and troubleshooting.
• Experience with SailPoint and BeyondTrust or CyberArk, and with SAML, OAuth 2.0, OIDC, SCIM, Kerberos, LDAP/LDAPS, REST APIs, and certificates.
• Ability to script, automate, and review technical solutions using PowerShell, Microsoft Graph, REST APIs, and at least one of Python, JavaScript, or infrastructure as code tools.
• Proven ability to turn architecture into working solutions, lead technical reviews, guide engineers, and communicate decisions to business and technology leaders.
• Experience in a regulated environment and certifications such as CISSP, Microsoft identity, SailPoint, BeyondTrust, or CyberArk are preferred.
• Strong familiarity with cybersecurity frameworks and standards (e.g., NIST CSF, NIST 800-53, Zero Trust Architecture concepts).
• Demonstrated ability to influence senior stakeholders and drive the adoption of modernized IAM concepts, processes and technology decisions across complex, regulated environments.
• Excellent communication skills, translating complex technical concepts into clear business impact.

About Alnylam

We are the leader in RNAi therapeutics- a revolutionaryapproach with the potential to transform the lives of people with rare and common diseases. Built on Nobel Prize-winning science, Alnylam has delivered the breakthroughs that made RNAi therapeutics possibleand are just at the beginning of what's possible. Our deep pipeline, late-stage programs, and bold vision reflect our core values: fierce innovation, passion for excellence, purposeful urgency, open culture and commitment to people. We're proud to be a globally recognized top employer, wherean authentic, inclusive culture and breakthrough thinkingfuel one another.

At Alnylam, we commit to an inclusive recruitment process and equal employment opportunity. Qualified applicants will receive consideration for employment without regard to their sex, gender or gender identity, sexual orientation, race, color, ethnicity, national origin, ancestry, citizenship, religion, creed, physical or mental disability, pregnancy status or related conditions, genetic information, veteran or military status, marital or familial status, political affiliation, age, or any other factor protected by federal, state, or local law. Alnylam is an E-Verify Employer.

Before applying, please review Alnylam's CandidatePrivacy Noticeregarding how Alnylam handles Personal Data you provide with your application for employment.

#LI-SS1

#LI-Cambridge