DescriptionKodiak Sciences is seeking a highly technical Senior IT / Security Engineer to execute IT and Security projects. Reporting to the Associate Director, IT, you will take prioritized initiatives from the business and IT & Security roadmap(s) and deliver them end-to-end: planning, coordinating stakeholders and vendors, implementing, validating, documenting, and handing off to steady-state operations. This is a high-capacity, high-output role. Your job is to turn business decisions and objectives into shipped, well-documented outcomes, often several at a time. Project management and communication skills are weighed equally with technical skills.
Key ResponsibilitiesProject Management & Delivery- Run multiple concurrent IT and security projects end-to-end: define scope and success criteria with the Associate Director, build the plan, track dependencies and risks, and drive to completion on schedule.
- Maintain a transparent project portfolio in Jira/Confluence with clear owners, dates, and status; publish concise weekly status updates and escalate blockers early with recommended options.
- Coordinate vendors, MSP/MSSP partners, and consultants on assigned projects; track deliverables against statements of work and hold partners accountable.
- Produce clean, reusable project artifacts: requirements, designs, test evidence, runbooks, and handoff documentation.
Technical Implementation- Implement and configure identity and access controls on AWS, Microsoft Entra ID, and other technical systems: SSO/MFA rollouts, SCIM provisioning, conditional access policies, and access-review cycles.
- Deploy and maintain endpoint management and security for macOS, Linux, and Windows: MDM enrollment, EDR (e.g. Microsoft Defender Suite, OSQuery, etc.), hardening baselines, and patch/vulnerability remediation.
- Execute cloud and SaaS workstreams in Microsoft 365, Azure/AWS, and Google Workspace: security configuration, DLP/information protection, backup, and integrations.
- Support network and site infrastructure projects (LAN/WLAN, firewalls, VPN/ZTNA) for the Palo Alto, Switzerland, and future campuses.
- Automate repetitive work with scripting (PowerShell, Python), AI workflows, and APIs; document what you build.
Security Operations Support- Triage and investigate security alerts from the SIEM/EDR; execute incident response procedures and document findings; coordinate with the MSSP as directed.
- Develop an automated triaging and escalation system around current and future security tools.
- Run the vulnerability remediation cycle: track findings, drive owners to closure, and report progress.
- Complete vendor security assessments and customer/partner security questionnaires.
Communication & Collaboration- Communicate clearly and proactively with stakeholders across the business including Quality, Digital Health, R&D, Clinical, Finance, and HR; translate technical details into plain language for non-technical audiences.
- Present project status and results to leadership when required, including executive and C-level audiences.
- Provide escalated (Tier 3) support and mentor IT support staff and contractors.
Education and Qualifications- 7+ years of hands-on IT infrastructure and/or information security engineering experience, with a demonstrated record of delivering multiple projects concurrently and on time.
- Hands-on experience in at least two of: identity (Okta/Entra ID), endpoint management/EDR, Microsoft 365/Azure or AWS administration and security, network security, SIEM/alert triage.
- Working knowledge of IAM concepts (SSO, MFA, SAML/OIDC, SCIM, conditional access).
- Scripting ability (PowerShell, Python, or similar) for automation and integration tasks.
- Strong project management fundamentals: planning, task tracking, vendor coordination, risk/issue management, and structured status reporting (Jira/Confluence or equivalent).
- Exceptional written and verbal English communication skills; comfortable presenting to executive and C-level leadership.
- Organized, detail-oriented, and comfortable with ambiguity; strong bias for action and follow-through.
- Ability to work on-site in Palo Alto, CA, 40 hours per week, with occasional after-hours availability for maintenance windows and incidents.
Preferred Qualifications- Experience at a clinical-stage or emerging biotech with a lean IT team.
- Computerized System Validation experience in a GxP-regulated biotech, pharmaceutical, or medical device environment (21 CFR Part 11, EU Annex 11, GAMP 5).
- Certifications such as CompTIA Security+, CISSP, Microsoft SC-300/AZ-104, PMP/CAPM, AWS Technical certifications, ISPE GAMP training or other relevant certifications.
- Familiarity with security frameworks (NIST CSF, SOC 2, CIS Controls) and with SASE/ZTNA platforms (Zscaler, Cloudflare).
- Experience with DocuSign, Veeva, or other common GxP SaaS platforms and with e-signature/Part 11 configurations.
- Bachelor's degree in Computer Science, Information Systems, or a related field, or equivalent practical experience.
