Operate and scale the identity platform and access governance program: lifecycle provisioning/deprovisioning, B2B guest governance, non-human identity management, SSO/SCIM integrations, privileged access controls, IAM audit support, endpoint/MDM and SaaS administration, and escalated end-user support. Partner with MSP and cyber team to secure identities and respond to identity-related incidents.
About Us
We are developing potentially best in class therapies for patients living with severe autoimmune diseases. Our lead antibody, claseprubart (DNTH103), is purposefully engineered with extended half-life, improved potency, and high selectivity for only the active C1s complement protein that drives disease pathology – enabling less frequent and more convenient self-administered subcutaneous injections. Our second clinical candidate, DNTH212 is a first and potentially best in class, bifunctional inhibitor that targets clinically validated and complementary disease modifying mechanisms, Type 1 IFN suppression and B cell modulation – enabling potential for improved clinical outcomes and patient friendly convenient, self-administered subcutaneous injections. To learn more, please visit www.dianthustx.com and follow us on LinkedIn.
About the Role
Dianthus is growing quickly, and we are looking for a hands-on Systems Administrator with strong Identity and Access Management (IAM) expertise to help us scale securely. You will be the operational owner of our identity platform and access governance program, responsible for “who — and what — has access to what”, covering employee, contractor, external partner (B2B), and non-human (service) identities. This is a high impact role where you will shape our identity lifecycle, strengthen our security posture, and support our SaaS and endpoint environment as we prepare for commercial scale.
We are building a culture of individuals who hold our core principles at the center of our operations, with the goal to elevate the care of our patients’ lives. We are open to you working remotely.
Key Responsibilities
Identity & Access Management
- Own the full identify lifecycle including automated provisioning/deprovisioning, and timely access revocation
- Govern external identities: Entra External ID / B2B guest access, cross-tenant collaboration, access packages, and routine guest access reviews
- Manage non-human identities: service principles, managed identities workload identities, and service accounts, including credential rotation, secret/certificate lifecycle, federated credentials
- Administer ID platform; conditional access policies, new program rollouts, identity protection, risk-based access controls, and Privileged Identity Management (PIM).
- Design and operate SSO and SCIM provisioning integrations across the SaaS application portfolio.
- Lead periodic access reviews and recertification campaigns; maintain least-privilege and role-based access control (RBAC) models across M365, Azure, and SaaS systems.
- Manage privileged access: break-glass accounts, admin role assignments, just-in-time (JIT) elevation, and segregation of duties.
- Establish and enforce external collaboration governance: which tenants can collaborate with Dianthus, what data can be shared, how guest accounts are sponsored, and how they are decommissioned.
- Support IAM audit and compliance evidence collection
- Support the response to identity-related security events in partnership with the cyber team
Endpoint, SaaS & End-User Support
- Manage the MDM/MAM environment for endpoints: configuration profiles, compliance policies, app deployment, enrollment, and remediation workflows.
- Administer the Enterprise tenant including license management, security baselines, and DLP policies.
- Provide day-to-day administration of the SaaS application portfolio, including user and license management, configuration changes, integration health monitoring, and vendor escalations.
- Deliver escalated technical support to end-users across identity, endpoint, productivity, and SaaS application issues, ensuring a high-quality employee experience.
- Support onboarding and offboarding automation, working with internal platforms and HR deliver a seamless, secure experience.
- Partner with our managed services provider (MSP) on escalations, projects, and security operations.
Experience
- Bachelors degree preferred and 4+ years of hands-on systems administration experience, with at least 2 years with explicit IAM responsibility.
- Strong understanding of IAM principles: identity lifecycle, RBAC, least privilege, separation of duties, access certification, and privileged access management.
- Experience administering B2B / guest identities and external collaboration controls
- Working knowledge of non-human identity management: service principals, managed identities, workload identity federation, and secret/certificate rotation.
- Experience designing and operating SSO and SCIM provisioning integrations for SaaS applications
- Experience with low-code automation platforms for workflow and integration automation.
- Demonstrated experience providing technical support to end-users, with strong customer service orientation and communication skills.
- Strong troubleshooting skills and a security-conscious, service-oriented mindset
- Experience in a regulated industry preferred. (biotech, pharma, healthcare, finance) with exposure to IAM audit controls
- Familiarity with GxP / 21 CFR Part 11 requirements for identify and access controls preferred
- Experience implementing or operating an Identity Governance & Administration (IGA) solution preferred
- Experience with secrets management platforms and integrating them into application workflows preferred
- Microsoft certifications: SC-300 (Identity and Access Administrator) strongly preferred; also MS-102, MD-102, or AZ-104
Similar Jobs
Artificial Intelligence • Fintech • Insurance • Marketing Tech • Software • Analytics
Handle inbound and warm sales leads, consult customers on insurance needs, match coverages and convert leads to policyholders. Receive paid remote training and licensing, work set shifts (including weekends), meet work-at-home technical requirements, and maintain strong sales, communication, and organizational skills.
Machine Learning • Payments • Security • Software • Financial Services
Lead and mature detection and incident response lifecycle, run day-to-day SOC operations, manage on‑call readiness, drive SIEM detections and automation, coordinate cross‑team responses, maintain playbooks and run readiness exercises, mentor analysts, and ensure regulatory and post‑incident improvements.
Top Skills:
Cloud SecurityEdrElasticEndpoint SecurityFedrampHipaaIdentity And Access ManagementIds/IpsIso 27035JIRAMitre Att&CkNist 800-61Pci DssServicenowSIEMSoc 2SplunkThreat Intelligence
Machine Learning • Payments • Security • Software • Financial Services
Lead and develop a team of automation engineers, own test automation backlog and frameworks, drive UI/API/performance testing, integrate AI-driven testing practices, collaborate cross-functionally, hire and mentor staff, and contribute hands-on to automation and CI/CD improvements.
Top Skills:
Agentic AiApache JmeterAWSAzureBitbucketCi/CdContainerizationCypressGCPGenerative AiGithub ActionsJavaScriptJenkinsMonitoringObservabilityPlaywrightPostmanPrompt EngineeringPythonRest ApisSeleniumTypescript
What you need to know about the Los Angeles Tech Scene
Los Angeles is a global leader in entertainment, so it’s no surprise that many of the biggest players in streaming, digital media and game development call the city home. But the city boasts plenty of non-entertainment innovation as well, with tech companies spanning verticals like AI, fintech, e-commerce and biotech. With major universities like Caltech, UCLA, USC and the nearby UC Irvine, the city has a steady supply of top-flight tech and engineering talent — not counting the graduates flocking to Los Angeles from across the world to enjoy its beaches, culture and year-round temperate climate.
Key Facts About Los Angeles Tech
- Number of Tech Workers: 375,800; 5.5% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Snap, Netflix, SpaceX, Disney, Google
- Key Industries: Artificial intelligence, adtech, media, software, game development
- Funding Landscape: $11.6 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Strong Ventures, Fifth Wall, Upfront Ventures, Mucker Capital, Kittyhawk Ventures
- Research Centers and Universities: California Institute of Technology, UCLA, University of Southern California, UC Irvine, Pepperdine, California Institute for Immunology and Immunotherapy, Center for Quantum Science and Engineering
