Sr. Manager - IT at Genetix Biotherapeutics in Somerville, MA

Job description

About Genetix Biotherapeutics At Genetix Biotherapeutics every role has meaning, every team member is respected, and every day is a chance to make a difference. When you join Genetix, you're not just landing a new role, you become part of a company that's pursuing curative gene therapies to give patients and their families more days. We are doers, thinkers and collaborators who embrace and live by our values: Our innovation is rooted in the diversity of our teams and results are achieved through cooperation and the integration of multiple viewpoints. This is personal and we approach every challenge with radical care. T his role is based in Somerville, MA and follows a hybrid schedule of three days onsite per week. To support regular in-office collaboration, only candidates within commuting distance of Somerville will be considered. Position Summary The Senior Manager, IT owns the day-to-day delivery of the security and infrastructure services that support Genetix’s commercial products. You will lead identity, endpoint, backup and recovery, network, and cloud operations during a period of active modernization, including a move of identity services toward Microsoft Entra, a rebuild of backup and DR, and hardening of both corporate and laboratory environments. This is a hands-on leader who can run projects through change control in a validated, regulated environment, manage vendors, and build a team and operating rhythm that is secure, auditable, and reliable. RESPONSIBILITIES Identity & Access Lead identity modernization across Microsoft Entra ID, Okta, and hybrid Active Directory, including SSO migrations for business applications, conditional access, MFA coverage, and authentication policy. Own privileged access: PIM, admin role reduction, service account de-privileging and lifecycle (inventory, owner, expiry, rotation), and stale account cleanup. Run access governance and least-privilege role design for business applications, with timely provisioning and deprovisioning for employees, contractors, consultants, and managed service providers. Own the AD security backlog, directory sync health (Entra Connect), and Group Policy migration to Intune. Infrastructure, Backup & Cloud Operate core infrastructure: AWS (multi-account, federated access, networking), on-prem and virtualized servers, firewalls and VPN, and legacy file services. Build and run backup and recovery, including backup platform deployment, network paths to cloud targets, restore testing, retention, and data archiving. Lead patching and lifecycle: OS and application patching, server and client end-of-life, and scheduled outage coordination. Manage DNS and domain hygiene, including verification records, decommissioned records, and legacy domain consolidation, to reduce attack surface. Lead monitoring and observability, including tool replacement and alerting tied to incident response. Endpoint, Lab & Security Operations Own endpoint and lab security: disk encryption and Secure Boot compliance, endpoint management, DNS-layer protection, patch policy for lab and corporate systems, and removal of retired tools. Own intake and triage of security reports, including phishing submissions and external vulnerability disclosures, with defined response and closure. Support audits and customer or partner security assessments (GxP, 21 CFR Part 11, SOX, SOC 2), including questionnaires, evidence collection, and remediation tracking. Validated Systems & Change Control Partner with Quality and application owners on infrastructure for validated systems (LIMS/ELN, statistical computing, lab instruments), including server builds, security hot fixes, non-production testing, regression sign-off, and change control. Support commercial and partner-facing systems and treatment center security and connectivity requirements. Team, Vendors & Delivery Lead, coach, and develop engineers and analysts; set priorities and manage workload across projects and service requests. Manage managed service