Principal Identity Governance and Administration - US - Remote

Who we are We’re a global, midsize CRO that pushes boundaries, innovates and invents because the path to a cure for the world’s most persistent diseases is not paved by those who play it safe. It is built by those who take pioneering, creative approaches and implement them with quality and excellence. We are Worldwide Clinical Trials, and we are a global team of over 3,500+ experts, bright thinkers, dreamers and doers and, together, we are changing the way the world experiences CROs – in the best possible way. Our mission is to work with passion and purpose every day to improve lives and we are looking for others who value this same pursuit. Why Worldwide We believe everyone plays an important role in making a world of difference for patients and their caregivers. From our hands-on, accessible leaders, to our cohesive and supportive teams, we are committed to enabling professionals from all backgrounds and experiences to succeed. We prioritize cultivating a diverse and inclusive environment that continues to promote collaboration and creativity. We are proud to be a workplace where people thrive by being themselves and are inspired to do their best work every day. Join us! What the Principal Identity Governance and Administration does at Worldwide The Principal Identity Governance and Administration leads the architecture, engineering, automation, and operational delivery of enterprise IAM capabilities at Worldwide. Reporting to the Senior Director of IAM, this hands-on technical leader designs, builds, and operates scalable identity solutions across a complex, regulated, global environment, including assisting with the selection and implementation of a new IAM platform. The Principal partners with Security, Infrastructure, Cloud, DevOps, Application, and business teams to modernize authentication and access models, standardize lifecycle processes, and strengthen governance across the enterprise. What you will do Architect, design, implement, and support enterprise IAM solutions for workforce, privileged, service, and application identities. Serve as a technical authority for Microsoft Entra ID, including Conditional Access, MFA, SSO, PIM, access reviews, and identity protection capabilities. Design and support hybrid identity solutions spanning Active Directory, Azure, Entra ID, and cloud/SaaS platforms. Lead hands-on engineering and automation efforts using PowerShell, Microsoft Graph, REST APIs, and related tooling. Develop and mature IAM integration patterns for enterprise applications using SAML, OAuth, OpenID Connect, SCIM, LDAP, and related identity standards where applicable. Support the design and implementation of role-based access control (RBAC), least privilege, privileged access governance, and lifecycle management processes. What you will bring to the role Extensive hands-on experience in IAM architecture, engineering, and operational delivery. Deep technical expertise with Microsoft Entra ID, Azure, Active Directory, PowerShell, and identity-related Microsoft cloud services. Experience with SQL or relational data platforms for reporting, reconciliation, and analysis. Understanding of authentication and federation protocols such as SAML, OAuth 2.0, OpenID Connect, Kerberos, LDAP, and SCIM. Strong analytical, troubleshooting, and problem-solving capabilities in complex enterprise environments. Experience implementing enterprise-grade IGA tools (e.g., SailPoint, Saviynt, Okta) Your experience Bachelor’s degree in Information Technology, Information Security, Computer Science, or a related field; equivalent relevant experience may be considered. Advanced degree preferred. 8+ years of progressive experience in Identity and Access Management, security engineering, infrastructure engineering, or related technical disciplines. Prior experience providing technical direction, making architecture decisions, and leading engineering execution. Demonstrated success designing and implementing IAM solutions in enterprise environments. Advanced hands-on experience with PowerShell automation and Microsoft identity technologies. Experience with Azure, Active Directory, enterprise application integration, and identity federation technologies. Relevant industry certifications such as CISSP, CISM, Microsoft security/identity certifications, Azure certifications, or related credentials are a plus. We love knowing that someone is going to have a better life because of the work we do. To view our other roles, check out our careers page at Discover a world of difference at Worldwide ! For more information on Worldwide, visit or connect with us on LinkedIn . Worldwide is an equal opportunity employer that is committed to enabling professionals from all backgrounds and experiences to succeed and, to that end, we prioritize attracting diverse talent and cultivating an inclusive environment that encourages collaboration and creativity. We know that when our employees feel appreciated and included, they can be more creative, innovative, and successful. We’re on a mission to hire the very best and are committed to creating exceptional employee experiences where everyone is respected and has access to equal opportunity. We provide equal employment opportunities to all employees and applicants regardless of race, color, ethnicity, ancestry, religion, national origin, gender, sex, gender identity or expression, sexual orientation, age, citizenship, marital or parental status, disability, military status, or other class protected by applicable law .