Sr. Manager - IT
- Compensation
- $170K–$185K / yr
- Location
- Somerville, MA
- Work setup
- Hybrid
- Seniority
- Senior
- Employment
- Not specified
- Experience
- 3+ years
- Category
- Not specified
- Posted
Skills
Must have
- Bachelor’s degree in IT, Computer Science, Information Security, or a related field, or equivalent practical experience.
- 8+ years in IT infrastructure, security operations, or systems engineering, including 3+ years leading people or technical teams.
- Hands-on identity experience: Entra ID and hybrid Active Directory required; Okta or another SSO platform strongly preferred. Includes conditional access, MFA, PIM, and service account governance.
- Hands-on experience with endpoint management (Intune), disk encryption, patching, and vulnerability management.
- Experience with backup and recovery platforms, cloud networking (AWS preferred), firewalls and VPN, and Microsoft 365.
- Experience managing projects through formal change control and managing vendors.
- Experience supporting audits or compliance programs in a regulated environment.
- Working knowledge of AI tools such as Claude (or similar) applied to operations.
- Strong communication skills, risk-based decision making, and the ability to prioritize competing demands in a small, fast-moving team.
Nice to have
- Biotech, pharma, or GxP experience, including computer system validation and supporting lab systems and instrumentation.
- Experience modernizing hybrid environments (IdP migrations, GPO to Intune, monitoring replacement, legacy domain consolidation).
- Security or infrastructure certifications (e.g., CISSP, CISM, Security+, AWS Security Specialty, Microsoft identity/security certifications).
- Experience in a company that is rebuilding or scaling its IT function.
Full description
About Genetix Biotherapeutics
At Genetix Biotherapeutics every role has meaning, every team member is respected, and every day is a chance to make a difference. When you join Genetix, you're not just landing a new role, you become part of a company that's pursuing curative gene therapies to give patients and their families more days. We are doers, thinkers and collaborators who embrace and live by our values:
Our innovation is rooted in the diversity of our teams and results are achieved through cooperation and the integration of multiple viewpoints. This is personal and we approach every challenge with radical care.
This role is based in Somerville, MA and follows a hybrid schedule of three days onsite per week. To support regular in-office collaboration, only candidates within commuting distance of Somerville will be considered.Position Summary
The Senior Manager, IT owns the day-to-day delivery of the security and infrastructure services that support Genetix’s commercial products. You will lead identity, endpoint, backup and recovery, network, and cloud operations during a period of active modernization, including a move of identity services toward Microsoft Entra, a rebuild of backup and DR, and hardening of both corporate and laboratory environments. This is a hands-on leader who can run projects through change control in a validated, regulated environment, manage vendors, and build a team and operating rhythm that is secure, auditable, and reliable.
RESPONSIBILITIESIdentity & Access
- Lead identity modernization across Microsoft Entra ID, Okta, and hybrid Active Directory, including SSO migrations for business applications, conditional access, MFA coverage, and authentication policy.
- Own privileged access: PIM, admin role reduction, service account de-privileging and lifecycle (inventory, owner, expiry, rotation), and stale account cleanup.
- Run access governance and least-privilege role design for business applications, with timely provisioning and deprovisioning for employees, contractors, consultants, and managed service providers.
- Own the AD security backlog, directory sync health (Entra Connect), and Group Policy migration to Intune.
Infrastructure, Backup & Cloud
- Operate core infrastructure: AWS (multi-account, federated access, networking), on-prem and virtualized servers, firewalls and VPN, and legacy file services.
- Build and run backup and recovery, including backup platform deployment, network paths to cloud targets, restore testing, retention, and data archiving.
- Lead patching and lifecycle: OS and application patching, server and client end-of-life, and scheduled outage coordination.
- Manage DNS and domain hygiene, including verification records, decommissioned records, and legacy domain consolidation, to reduce attack surface.