Description
GSK is seeking an Associate Director to lead the engineering and delivery of authentication and cloud security solutions. The successful candidate will be responsible for building a global team of engineers, delivering a roadmap for authentication and cloud security, and ensuring the security of GSK's cloud and AI future.
Key responsibilities:
- Build one team: Lead and develop a global team of engineers across SSO, cloud, NHI and AI agent identity
- Deliver the roadmap: Own the engineering roadmap, delivery plans and service measures
- Make sign-in passwordless and trusted: Run GSK’s SSO services, moving the workforce to passwordless, phishing-resistant authentication
- Secure the cloud: Protect cloud accounts and access in Azure and GCP with strong authentication, workload identity federation, least privilege and just-in-time access
- Bring workloads and AI agents into the fold: Give non-human identities and AI agents unique, accountable identities
- Move from secrets to secretless: Drive adoption of secrets vaulting and management
- Partner with PKI: Work with the PKI & Cryptographic Services lead to secure cloud, AI and secrets
- Use AI ourselves: Apply AI to identity engineering and operations
- Set the example: Show GSK what secure cloud and AI looks like through secure-by-default implementations
- Keep trust earned: Ensure these services meet audit and compliance requirements
Basic Qualifications:
- Degree in computer science, information technology, cyber security or a related field
- At least 10 years’ experience in identity or security, including leading engineering teams
- Strong knowledge of SSO and modern authentication
- Hands-on experience securing identity and access in Azure
- Experience securing non-human identities and secrets
- Working knowledge of AI and large language model security risks
- Strong leadership, delivery and communication skills
Preferred Qualifications:
- Experience delivering SSO at scale with Microsoft Entra ID or Ping Identity
- Experience securing identity and access in Google Cloud (GCP)
- Experience with secrets vaulting and management platforms
- Experience securing AI agents or platforms
- Certifications such as CISSP, CCSP, Microsoft Identity and Access Administrator