Principal Identity Security Engineer - Privileged Access Management (PAM)
Core
Principal Identity Security Engineer leading enterprise Privileged Access Management (PAM) architecture, engineering, and resilience for a global medical technology environment.
Role type
Principal, hands-on IC
Builds
Secure, scalable PAM architectures, engineering standards, and modernization solutions for privileged access and identity security.
Domain
Medical technology / Cybersecurity
Required skills
CyberArk expertise, enterprise security architecture, privileged account management, session monitoring, credential rotation, secrets management, Zero Trust design, regulatory compliance (FDA, ISO 13485, IEC 62443), OT/ICS security, incident response, technical mentorship
Preferred skills
Experience with BeyondTrust, Delinea, Microsoft Entra PIM, HashiCorp Vault, cloud platforms, identity governance
Technologies
CyberArk, BeyondTrust, Delinea, Microsoft Entra ID, Active Directory, HashiCorp Vault, industrial control systems, manufacturing execution systems
Responsibilities
Design and implement secure PAM architectures; lead complex CyberArk engineering initiatives; develop secure access patterns for human and non-human identities; integrate PAM with identity governance and cloud platforms; design compensating controls for legacy/validated systems; translate regulatory requirements into technical controls; mentor engineers and establish security metrics.
Seniority
Principal, hands-on IC