Senior Zero Trust Architect / Engineer

Legend Biotech is a global biotechnology company dedicated to treating and, one day, curing life-threatening diseases. Headquartered in Bridgewater, New Jersey, we are advancing the next generation of cell therapy through a portfolio of innovative technologies, including autologous, allogeneic, and in vivo cell therapy approaches. Our research spans chimeric antigen receptor T-cell (CAR-T), T-cell receptor (TCR-T), natural killer (NK) cell-based therapies, and other emerging platforms designed to transform the treatment of serious diseases. From our global network of research and development sites, we are committed to discovering and developing safe, effective, and cutting-edge therapies for patients worldwide.

Legend Biotech entered into a global collaboration agreement with Johnson & Johnson to jointly develop and commercialize CARVYKTI® (ciltacabtagene autoleucel; cilta-cel). Through this strategic partnership, we combine complementary expertise and capabilities to advance innovative immunotherapies for patients living with multiple myeloma.

Legend Biotech is seeking a Senior Zero Trust Architect / Engineer as part of the Information Technology team based in Bridgewater, NJ or Somerset, NJ.

The Senior Zero Trust Architect / Engineer is responsible for designing, implementing, and governing the organization's Zero Trust security strategy across users, devices, applications, networks, data, and cloud environments. This role serves as a senior technical leader, driving the adoption of modern security architectures that continuously verify trust, minimize attack surfaces, enforce least-privilege access, and protect critical enterprise assets.

The candidate should possess deep expertise in identity security, network security, cloud security, endpoint protection, data protection, and security architecture. This position partners closely with Infrastructure, Cloud, Digital Workplace, Enterprise Applications, Compliance, and Cybersecurity teams to ensure security controls align with business objectives while supporting a modern, flexible workforce.

The ideal candidate will have hands-on experience with Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), and Zero Trust architecture.

• Develop and maintain the enterprise Zero Trust architecture roadmap aligned with business and cybersecurity objectives.

• Design and implement security architectures based on NIST Zero Trust Architecture (SP 800-207), CISA Zero Trust Maturity Model, and industry best practices.

• Lead enterprise-wide Zero Trust transformation initiatives across cloud, on-premises, and hybrid environments.

• Define security reference architectures, standards, policies, and design principles.

• Conduct architecture reviews and provide guidance for new technology deployments.

• Architect micro-segmentation and software-defined perimeter solutions.

• Design secure access controls for:

• Corporate networks

• Data centers

• Cloud environments

• Third-party connectivity

• Implement Zero Trust Network Access (ZTNA) technologies.

• Reduce reliance on traditional VPN architectures.

• Lead network access policy modernization initiatives.

• Design and implement