Position Summary

The Senior Manager, IT owns the day-to-day delivery of the security and infrastructure services that support Genetix’s commercial products. You will lead identity, endpoint, backup and recovery, network, and cloud operations during a period of active modernization, including a move of identity services toward Microsoft Entra, a rebuild of backup and DR, and hardening of both corporate and laboratory environments. This is a hands-on leader who can run projects through change control in a validated, regulated environment, manage vendors, and build a team and operating rhythm that is secure, auditable, and reliable.

RESPONSIBILITIES

Identity & Access

• Lead identity modernization across Microsoft Entra ID, Okta, and hybrid Active Directory, including SSO migrations for business applications, conditional access, MFA coverage, and authentication policy.
• Own privileged access: PIM, admin role reduction, service account de-privileging and lifecycle (inventory, owner, expiry, rotation), and stale account cleanup.
• Run access governance and least-privilege role design for business applications, with timely provisioning and deprovisioning for employees, contractors, consultants, and managed service providers.
• Own the AD security backlog, directory sync health (Entra Connect), and Group Policy migration to Intune.

Infrastructure, Backup & Cloud

• Operate core infrastructure: AWS (multi-account, federated access, networking), on-prem and virtualized servers, firewalls and VPN, and legacy file services.
• Build and run backup and recovery, including backup platform deployment, network paths to cloud targets, restore testing, retention, and data archiving.
• Lead patching and lifecycle: OS and application patching, server and client end-of-life, and scheduled outage coordination.
• Manage DNS and domain hygiene, including verification records, decommissioned records, and legacy domain consolidation, to reduce attack surface.
• Lead monitoring and observability, including tool replacement and alerting tied to incident response.

Endpoint, Lab & Security Operations

• Own endpoint and lab security: disk encryption and Secure Boot compliance, endpoint management, DNS-layer protection, patch policy for lab and corporate systems, and removal of retired tools.
• Own intake and triage of security reports, including phishing submissions and external vulnerability disclosures, with defined response and closure.
• Support audits and customer or partner security assessments (GxP, 21 CFR Part 11, SOX, SOC 2), including questionnaires, evidence collection, and remediation tracking.

Validated Systems & Change Control

• Partner with Quality and application owners on infrastructure for validated systems (LIMS/ELN, statistical computing, lab instruments), including server builds, security hot fixes, non-production testing, regression sign-off, and change control.
• Support commercial and partner-facing systems and treatment center security and connectivity requirements.

Team, Vendors & Delivery

• Lead, coach, and develop engineers and analysts; set priorities and manage workload across projects and service requests.
• Manage managed service providers and vendors (SLAs, contracts, performance, escalation).
• Define SLAs and reporting for security and infrastructure requests, and improve intake, approval, and onboarding workflows with the service desk.
• Write runbooks, SOPs, and change records so operations are repeatable and audit-ready.
• Apply AI tools such as Claude in daily work, including integrations with enterprise systems, and champion responsible AI adoption with appropriate access controls.

QUALIFICATIONS

Required

• Bachelor’s degree in IT, Computer Science, Information Security, or a related field, or equivalent practical experience.
• 8+ years in IT infrastructure, security operations, or systems engineering, including 3+ years leading people or technical teams.
• Hands-on identity experience: Entra ID and hybrid Active Directory required; Okta or another SSO platform strongly preferred. Includes conditional access, MFA, PIM, and service account governance.
• Hands-on experience with endpoint management (Intune), disk encryption, patching, and vulnerability management.
• Experience with backup and recovery platforms, cloud networking (AWS preferred), firewalls and VPN, and Microsoft 365.
• Experience managing projects through formal change control and managing vendors.
• Experience supporting audits or compliance programs in a regulated environment.
• Working knowledge of AI tools such as Claude (or similar) applied to operations.
• Strong communication skills, risk-based decision making, and the ability to prioritize competing demands in a small, fast-moving team.

Preferred

• Biotech, pharma, or GxP experience, including computer system validation and supporting lab systems and instrumentation.
• Experience modernizing hybrid environments (IdP migrations, GPO to Intune, monitoring replacement, legacy domain consolidation).
• Security or infrastructure certifications (e.g., CISSP, CISM, Security+, AWS Security Specialty, Microsoft identity/security certifications).
• Experience in a company that is rebuilding or scaling its IT function.