Principal Architect, Identity Governance and Administration

Broad Institute
paid time off, paid holidays, 401(k), retirement plan
United States, Massachusetts, Cambridge
Oct 20, 2025
Description & Requirements The Broad Institute's IT Services (BITS) group is dedicated to building an exceptional team to support the Institute's mission of "Accelerating the Understanding and Treatment of Disease." Our team of technical experts collaborates with researchers to develop, scale, and manage a wide range of technology solutions. We are seeking a driven and enthusiastic Principal Architect for Identity Governance and Administration to contribute to our community. In this role, you will be responsible for the platform strategy for identities, maturity, workflow automation, customer engagement, and quality within Identity Governance and Administration. You will work directly with technologies such as Okta, Active Directory, Entra ID, Google Workspace and Active Directory Federated Services. Key Responsibilities: This position encompasses both technical expertise and managerial responsibilities, requiring a unique blend of skills. The successful candidate will be expected to contribute directly to technical projects while also leading and guiding a team. Develop and implement the platform strategy for identity governance and administration. Drive the maturity of identity management processes and systems. Understanding the technology landscape and emerging innovations in order to build a long term roadmap for your products and services. Design and implement workflow automation for identity-related tasks. Engage with customers to understand their identity and access management needs and provide solutions. Setting clear priorities that allow a team of technical professionals to deliver the product and service features that will have the maximum impact for our customers. Ensure the quality and reliability of identity services. Work hands-on with Duo Mobile, Okta, Active Directory, Entra ID, Google Workspace and Active Directory Federated Services. Manage vendor relationships for core systems and collaborate with vendors on integration activities. Collaborate with team members to deliver an exceptional user experience, focusing on automated provisioning and deprovisioning of applications and services. Manage and improve 2FA within the Broad. Collaborate with IT and non-IT team members with the development of account strategies across the institution. Requirements: Minimum 10 years of experience working directly with identity technologies such as Okta, Active Directory, Entra ID, and Active Directory Federated Services. Minimum of 5 years managing a team of highly technical individuals. Proven experience in platform strategy, maturity, workflow automation, customer engagement, and quality within Identity Governance and Administration. Deep understanding of Single Sign-On (SSO) and other authentication protocols. A proven track record supporting the ongoing career development and manager responsibilities of individual contributors, including team staffing, performance feedback, and supporting ongoing development of individuals within the team. Familiarity with Identity Federation technologies for third-party partnerships and external institutions. Experience with managing Active Directory administration and maintenance both on-premise and in the cloud. Knowledge of different methods of digital certificate management. Familiarity with Dual/Multi Factor Authentication methods. Comfortable providing consultative experience to both technical and non-technical consumers of Identity and Access Management offerings. The Broad Institute will not offer visa sponsorship for this opportunity. The expected base salary range for this position as listed above is based on a 40 hour per week schedule. Broad provides pay ranges representing its reasonable and good faith estimate of what the organization reasonably expects to pay for a position at the time of posting. Actual compensation will vary based on factors including but not limited to, relevant skills, experience, education, qualifications, and other factors permissible by law. At Broad, your base pay is just one part of a comprehensive total rewards package. From day one, this role offers a competitive benefits package including medical, dental, vision, life, and disability insurance; a 401(k) retirement plan; flexible spending and health savings accounts; at least 13 paid holidays; winter closure; paid time off; parental and family care leave; and an employee assistance program, among other Broad benefits. The Broad Institute is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, national origin, religion, age, color, sex, disability, protected veteran status, or any other characteristic protected by local, state, or federal laws, rules, or regulations. Should you need a reasonable accommodation to complete the application or interview process, please contact recruiting@broadinstitute.org for assistance.