Senior IT / Security Engineer

Kodiak Sciences is seeking a highly technical Senior IT / Security Engineer to execute IT and Security projects. Reporting to the Associate Director, IT, you will take prioritized initiatives from the business and IT & Security roadmap(s) and deliver them end-to-end: planning, coordinating stakeholders and vendors, implementing, validating, documenting, and handing off to steady-state operations. This is a high-capacity, high-output role. Your job is to turn business decisions and objectives into shipped, well-documented outcomes, often several at a time. Project management and communication skills are weighed equally with technical skills. Key Responsibilities Project Management & Delivery

• Run multiple concurrent IT and security projects end-to-end: define scope and success criteria with the Associate Director, build the plan, track dependencies and risks, and drive to completion on schedule.
• Maintain a transparent project portfolio in Jira/Confluence with clear owners, dates, and status; publish concise weekly status updates and escalate blockers early with recommended options.
• Coordinate vendors, MSP/MSSP partners, and consultants on assigned projects; track deliverables against statements of work and hold partners accountable.
• Produce clean, reusable project artifacts: requirements, designs, test evidence, runbooks, and handoff documentation.

Technical Implementation

• Implement and configure identity and access controls on AWS, Microsoft Entra ID, and other technical systems: SSO/MFA rollouts, SCIM provisioning, conditional access policies, and access-review cycles.
• Deploy and maintain endpoint management and security for macOS, Linux, and Windows: MDM enrollment, EDR (e.g. Microsoft Defender Suite, OSQuery, etc.), hardening baselines, and patch/vulnerability remediation.
• Execute cloud and SaaS workstreams in Microsoft 365, Azure/AWS, and Google Workspace: security configuration, DLP/information protection, backup, and integrations.
• Support network and site infrastructure projects (LAN/WLAN, firewalls, VPN/ZTNA) for the Palo Alto, Switzerland, and future campuses.
• Automate repetitive work with scripting (PowerShell, Python), AI workflows, and APIs; document what you build.

Security Operations Support

• Triage and investigate security alerts from the SIEM/EDR; execute incident response procedures and document findings; coordinate with the MSSP as directed.
• Develop an automated triaging and escalation system around current and future security tools.
• Run the vulnerability remediation cycle: track findings, drive owners to closure, and report progress.
• Complete vendor security assessments and customer/partner security questionnaires.

Communication & Collaboration

• Communicate clearly and proactively with stakeholders across the business including Quality, Digital Health, R&D, Clinical, Finance, and HR; translate technical details into plain language for non-technical audiences.
• Present project status and results to leadership when required, including executive and C-level audiences.
• Provide escalated (Tier 3) support and mentor IT support staff and contractors.

Education and Qualifications

• 7+ years of hands-on IT infrastructure and/or information security engineering experience, with a demonstrated record of delivering multiple projects concurrently and on time.
• Hands-on experience in at least two of: identity (Okta/Entra ID), endpoint management/EDR, Microsoft 365/Azure or AWS administration and security, network security, SIEM/alert triage.
• Working knowledge of IAM concepts (SSO, MFA, SAML/OIDC, SCIM, conditional access).
• Scripting ability (PowerShell, Python, or similar) for automation and integration tasks.
• Strong project management fundamentals: planning, task tracking, vendor coordination, risk/issue management, and structured status reporting (Jira/Confluence or equivalent).
• Exceptional written and verbal English communication skills; comfortable presenting to executive and C-level leadership.
• Organized, detail-oriented, and comfortable with ambiguity; strong bias for action and follow-through.
• Ability to work on-site in Palo Alto, CA, 40 hours per week, with occasional after-hours availability for maintenance windows and incidents.

Preferred Qualifications

• Experience at a clinical-stage or emerging biotech with a lean IT team.
• Computerized System Validation experience in a GxP-regulated biotech, pharmaceutical, or medical device environment (21 CFR Part 11, EU Annex 11, GAMP 5).
• Certifications such as CompTIA Security+, CISSP, Microsoft SC-300/AZ-104, PMP/CAPM, AWS Technical certifications, ISPE GAMP training or other relevant certifications.
• Familiarity with security frameworks (NIST CSF, SOC 2, CIS Controls) and with SASE/ZTNA platforms (Zscaler, Cloudflare).
• Experience with DocuSign, Veeva, or other common GxP SaaS platforms and with e-signature/Part 11 configurations.
• Bachelor's degree in Computer Science, Information Systems, or a related field, or equivalent practical experience.