Back to jobs
New

Senior Zero Trust Architect / Engineer

Bridgewater, New Jersey, United States; Somerset, New Jersey, United States

Legend Biotech is a global biotechnology company dedicated to treating and, one day, curing life-threatening diseases. Headquartered in Bridgewater, New Jersey, we are advancing the next generation of cell therapy through a portfolio of innovative technologies, including autologous, allogeneic, and in vivo cell therapy approaches. Our research spans chimeric antigen receptor T-cell (CAR-T), T-cell receptor (TCR-T), natural killer (NK) cell-based therapies, and other emerging platforms designed to transform the treatment of serious diseases. From our global network of research and development sites, we are committed to discovering and developing safe, effective, and cutting-edge therapies for patients worldwide.

Legend Biotech entered into a global collaboration agreement with Johnson & Johnson to jointly develop and commercialize CARVYKTI® (ciltacabtagene autoleucel; cilta-cel). Through this strategic partnership, we combine complementary expertise and capabilities to advance innovative immunotherapies for patients living with multiple myeloma.

Legend Biotech is seeking a Senior Zero Trust Architect / Engineer as part of the Information Technology team based in Bridgewater, NJ or Somerset, NJ. 

Role Overview

The Senior Zero Trust Architect / Engineer is responsible for designing, implementing, and governing the organization's Zero Trust security strategy across users, devices, applications, networks, data, and cloud environments. This role serves as a senior technical leader, driving the adoption of modern security architectures that continuously verify trust, minimize attack surfaces, enforce least-privilege access, and protect critical enterprise assets.

The candidate should possess deep expertise in identity security, network security, cloud security, endpoint protection, data protection, and security architecture. This position partners closely with Infrastructure, Cloud, Digital Workplace, Enterprise Applications, Compliance, and Cybersecurity teams to ensure security controls align with business objectives while supporting a modern, flexible workforce.

The ideal candidate will have hands-on experience with Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), and Zero Trust architecture.

Key Responsibilities

  • Develop and maintain the enterprise Zero Trust architecture roadmap aligned with business and cybersecurity objectives.
  • Design and implement security architectures based on NIST Zero Trust Architecture (SP 800-207), CISA Zero Trust Maturity Model, and industry best practices.
  • Lead enterprise-wide Zero Trust transformation initiatives across cloud, on-premises, and hybrid environments.
  • Define security reference architectures, standards, policies, and design principles.
  • Conduct architecture reviews and provide guidance for new technology deployments.
  • Architect micro-segmentation and software-defined perimeter solutions.
  • Design secure access controls for:
    • Corporate networks
    • Data centers
    • Cloud environments
    • Third-party connectivity
  • Implement Zero Trust Network Access (ZTNA) technologies.
  • Reduce reliance on traditional VPN architectures.
  • Lead network access policy modernization initiatives.
  • Design and implement security architectures across:
    • Microsoft Azure
    • AWS
  • Collaborate with cloud engineering teams to establish secure landing zones.
  • Implement cloud-native security controls and posture management capabilities.
  • Evaluate and improve cloud identity and access security.
  • Lead implementation of Zero Trust security technologies and integrations.
  • Establish security monitoring and continuous verification capabilities.
  • Support incident response and threat hunting activities.
  • Identify security gaps and remediation opportunities through assessments and architecture reviews.
  • Develop automation and orchestration solutions to improve security operations.
  • Translate regulatory and compliance requirements into technical security controls.
  • Participate in risk assessments and security audits.
  • Develop metrics and KPIs to measure Zero Trust maturity and effectiveness.
  • Present architecture recommendations and risk findings to senior leadership.
  • Strong executive communication and presentation skills.
  • Ability to influence stakeholders across business and technical teams.
  • Strategic thinker with strong architectural and analytical skills.
  • Proven ability to lead complex enterprise transformation initiatives.
  • Excellent problem-solving and decision-making capabilities.

Requirements

  • Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or related discipline.
  • Master's degree preferred
  • Zscaler Certified Administrator (ZCCA)
  • Zscaler Certified Professional (ZCCP)
  • Microsoft Security certifications
  • CISSP, CCSP, Security+, or equivalent certifications
  • Microsoft Certified Cybersecurity Architect Expert (SC-100)
  • Microsoft Security Operations Analyst (SC-200)
  • Azure Solutions Architect Expert
  • GIAC Security Certifications
  • Network certification
  • 10+ years of IT infrastructure, cybersecurity, or security engineering experience.
  • 5+ years designing enterprise security architectures.
  • 3+ years leading Zero Trust initiatives or enterprise identity modernization programs.
  • Experience in highly regulated industries such as biotechnology, pharmaceuticals, healthcare, or financial services preferred.
  • Technical Expertise:
    • Microsoft Entra ID (Azure AD)
    • Microsoft Active Directory (ADDS)
    • Conditional Access
    • Identity Governance
    • Privileged Identity Management (PIM)
    • Privileged Access Management (PAM)
    • Federation technologies supporting SSO (SAML, OAuth, OIDC)
    • Microsoft: Defender, Purview, M365, Intune, MS Graph
    • Optional: Sentinel
    • Azure
    • AWS
    • Zero Trust Network Access (ZTNA)
    • Secure Web Gateway
    • Network Micro-Segmentation
    • Zscaler – zia, zpa, zdx
    • NIST 800-207
    • NIST Cybersecurity Framework
    • CISA Zero Trust Maturity Model
  • Language(s): English, Mandarin a plus

#Li-FB1

#Li-Onsite

The base pay range below is what Legend Biotech USA Inc. reasonably expects to offer at the time of posting. Actual compensation may vary based on experience, skills, qualifications, and geographic location. The company reserves the right to modify this range as needed and in accordance with applicable laws.

Other Types of Pay: Performance-based bonus and/or equity is available to employees in eligible roles.

Benefits and Paid Time Off: Medical, dental, and vision insurance as well as a 401(k) retirement plan with a company match that vests fully on day one. We offer eight (8) weeks of paid parental leave after just three (3) months of employment, and a paid time off policy that includes vacation time, personal time, sick time, floating holidays, and eleven (11) company holidays. Additional voluntary benefits include flexible spending and health savings accounts, life and AD&D insurance, short- and long-term disability coverage, legal assistance, and supplemental plans such as pet, critical illness, accident, and hospital indemnity insurance. We also provide voluntary commuter benefits, family planning and care resources, well-being initiatives, and peer-to-peer recognition programs; demonstrating our ongoing commitment to building a culture where our people feel empowered, supported, and inspired to do their best work.

Pay Range (Base Pay):

$110,706 - $145,303 USD

Please note: These benefits are offered exclusively to permanent full-time employees. Contractors are not eligible for benefits through Legend Biotech.

Work Authorization & Employment Eligibility

Applicants must be authorized to work in the United States. As part of our commitment to maintaining a lawful workforce and ensuring compliance with federal employment regulations, we participate in the E-Verify program. If you are selected for employment, you will be required to complete the Form I-9 process, and your employment eligibility will be verified through E-Verify in accordance with applicable federal law. We are committed to providing a fair, transparent, and welcoming hiring experience for all candidates.

EEO Statement

It is the policy of Legend Biotech to provide equal employment opportunities without regard to actual or perceived race, color, creed, religion, national origin, ancestry, citizenship status, age, sex or gender (including pregnancy, childbirth, related medical conditions and lactation), gender identity or gender expression (including transgender status), sexual orientation, marital status, military service and veteran status, disability, genetic information, or any other protected characteristic under applicable federal, state or local laws or ordinances.

Employment is at-will and may be terminated at any time with or without cause or notice by the employee or the company.

For information related to our privacy notice, please review: Legend Biotech Privacy Notice.

Create a Job Alert

Interested in building your career at Legend Biotech US? Get future opportunities sent straight to your email.

Apply for this job

*

indicates a required field

Resume/CV*

Accepted file types: pdf, doc, docx, txt, rtf

Cover Letter

Accepted file types: pdf, doc, docx, txt, rtf

Select...
Select...
Select...
Select...
Select...
Select...
Select...

Please add the link to your LinkedIn profile if applicable. If you do not have a LinkedIn, please write down N/A.

Select...
Select...

I (the candidate) enter into this Non-Disclosure Agreement (the “Agreement”) with Legend Biotech USA Inc. (the “Company”), effective as of the date of my acknowledgement below, for the purpose of enabling the Company to evaluate a possible employment relationship with me.

  1. Access to Company Confidential Information. I acknowledge that for the sole and limited purpose of evaluating a possible employment relationship with me, the Company might disclose, or enable me to have access to, certain Confidential Information of the Company, as defined below.  I agree that, except for purposes of evaluating a possible employment relationship with the Company or as expressly authorized in writing by the Company, I will (a) not use or disclose any Confidential Information; (b) keep all Confidential Information confidential at all times; and (c) not copy, reproduce or modify any Confidential Information.
  2. Definition of “Confidential Information.” For purposes of this Agreement, “Confidential Information” shall mean any and all information and materials provided to me by the Company, including without limitation, inventions, trade secrets, software code, product development and marketing strategies, ideas, processes, formulas, know-how, unpublished financial information, business plans, contractual relationships with third parties and operating strategies; memoranda, notes, records, drawings, manuals, disks, or other documents and media; and all embodiments, copies, extracts, and summaries thereof; provided, however, that “Confidential Information” shall not include information that: (a) is generally known or available to the public, or (b) is furnished to me by a third party who obtained such information using lawful means and without any restrictions on disclosure.
  3. Third Party Information. I agree that during the course of communications with the Company pursuant to this Agreement or in connection with my application and interviews for employment with the Company, I will not make any unauthorized use or disclosure to the Company of any confidential or proprietary information or trade secrets of any other person or entity to whom I have an obligation of confidentiality with respect to such information, including any current or former employer.  I further agree not to provide to the Company any materials or documents of any third party that are not generally available to the public.
  4. Remedies for Breach. I acknowledge that in the event of any breach of this Agreement, the Company will not have an adequate remedy in money or damages, and therefore the Company shall be entitled to obtain temporary, preliminary and/or permanent injunctive relief to redress any such breach, from any court of competent jurisdiction, and that the Company’s right to obtain such relief shall not limit its right to obtain other available remedies.
  5. General. The interpretation and enforcement of this Agreement shall be governed by the laws of the State of California.  This Agreement constitutes the entire agreement between the parties concerning the subject matters hereof; it supersedes any and all prior agreements or representations, written or oral, with respect to its subject matters; and it cannot be modified except in a written agreement signed by the Company.

Select...

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file.

As set forth in Legend Biotech US’s Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law.

Select...
Select...
Race & Ethnicity Definitions

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection. As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measure the effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categories is as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.

Select...

Voluntary Self-Identification of Disability

Form CC-305
Page 1 of 1
OMB Control Number 1250-0005
Expires 07/31/2029

Why are you being asked to complete this form?

We are a federal contractor or subcontractor. The law requires us to provide equal employment opportunity to qualified people with disabilities. We have a goal of having at least 7% of our workers as people with disabilities. The law says we must measure our progress towards this goal. To do this, we must ask applicants and employees if they have a disability or have ever had one. People can become disabled, so we need to ask this question at least every five years.

Completing this form is voluntary, and we hope that you will choose to do so. Your answer is confidential. No one who makes hiring decisions will see it. Your decision to complete the form and your answer will not harm you in any way. If you want to learn more about the law or this form, visit the U.S. Department of Labor’s Office of Federal Contract Compliance Programs (OFCCP) website at www.dol.gov/ofccp.

How do you know if you have a disability?

A disability is a condition that substantially limits one or more of your “major life activities.” If you have or have ever had such a condition, you are a person with a disability. Disabilities include, but are not limited to:

  • Alcohol or other substance use disorder (not currently using drugs illegally)
  • Autoimmune disorder, for example, lupus, fibromyalgia, rheumatoid arthritis, HIV/AIDS
  • Blind or low vision
  • Cancer (past or present)
  • Cardiovascular or heart disease
  • Celiac disease
  • Cerebral palsy
  • Deaf or serious difficulty hearing
  • Diabetes
  • Disfigurement, for example, disfigurement caused by burns, wounds, accidents, or congenital disorders
  • Epilepsy or other seizure disorder
  • Gastrointestinal disorders, for example, Crohn's Disease, irritable bowel syndrome
  • Intellectual or developmental disability
  • Mental health conditions, for example, depression, bipolar disorder, anxiety disorder, schizophrenia, PTSD
  • Missing limbs or partially missing limbs
  • Mobility impairment, benefiting from the use of a wheelchair, scooter, walker, leg brace(s) and/or other supports
  • Nervous system condition, for example, migraine headaches, Parkinson’s disease, multiple sclerosis (MS)
  • Neurodivergence, for example, attention-deficit/hyperactivity disorder (ADHD), autism spectrum disorder, dyslexia, dyspraxia, other learning disabilities
  • Partial or complete paralysis (any cause)
  • Pulmonary or respiratory conditions, for example, tuberculosis, asthma, emphysema
  • Short stature (dwarfism)
  • Traumatic brain injury
Select...

PUBLIC BURDEN STATEMENT: According to the Paperwork Reduction Act of 1995 no persons are required to respond to a collection of information unless such collection displays a valid OMB control number. This survey should take about 5 minutes to complete.