Identity Management Engineer

About Astellas

Astellas is a global life sciences company committed to turning innovative science into VALUE for patients. We provide transformative therapies in disease areas that include oncology, ophthalmology, urology, immunology and women's health. Through our research and development programs, we are pioneering new healthcare solutions for diseases with high unmet medical need. Learn more at Astellas.com.

Are you driven to make a real difference in the lives of patients?

We're seeking passionate individuals who thrive in dynamic environments, embrace new ideas, and aren't afraid to take intelligent risks. People who act with unwavering integrity and are deeply committed to making a tangible impact.

Purpose and Scope:

As an Identity and Access Management (IAM) Engineer, you will play a key role in protecting our organization's digital assets by ensuring secure, compliant, and efficient management of user identities and access across systems and applications. This position has been established as part of our initiative to strengthen internal IAM operations, enhance automation in identity lifecycle management, and advance towards a 'best in industry' access governance framework.

Responsibilities and Accountabilities:

• Execute and support daily IAM/PAM operations including user provisioning, de-provisioning, and access changes across Active Directory, Entra ID (Azure AD), ERP systems, and SaaS applications.
• Administer and maintain CyberArk PAS components including Vault, PVWA, CPM, and PSM, ensuring secure management of privileged accounts and credentials.
• Monitor and maintain the health, performance, and scheduled jobs of IAM/PAM platforms such as CyberArk and Entra ID, ensuring high availability and operational integrity.
• Manage service requests and incidents related to access control, authentication, and account lifecycle, resolving issues within defined SLAs.
• Troubleshoot and resolve authentication failures, access provisioning errors, and MFA/SSO-related issues across hybrid environments.
• Perform regular access reviews, entitlement clean-ups, and role-based access audits to enforce least privilege and meet compliance requirements.
• Support integration and synchronization of identity data between HR systems and IAM platforms, ensuring accurate and timely updates.
• Collaborate with SOC, Infrastructure, and HR teams to maintain secure and efficient identity lifecycle processes and respond to IAM-related security events.
• Escalate complex technical issues to engineering and architecture teams, contributing to root cause analysis and long-term remediation.
• Document recurring issues, configuration changes, and operational procedures, contributing to the internal knowledge base and support documentation.
• Participate in change management activities including testing, validation, and deployment of IAM system upgrades, patches, and new feature rollouts.