Architect, Privileged Access Management

Danaher Corporation; United States; Remote; USD 140,000 - 210,000; Full time

Job summary

Danaher is seeking an Architect, Privileged Access Management to design enterprise PAM architecture across regions and translate it into reference designs for privileged identities. You will collaborate with IAM, infrastructure, cloud, and DevOps teams to govern privileged-access controls and exceptions.

The role reports to the Director of Identity Security & Privileged Access Management as part of the DIS team and is a remote associate position with global scope.

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering, or related field.
• 9+ years of cybersecurity experience focusing on identity and access or PAM.
• Experience designing PAM architecture and integrating PAM platforms with IAM, cloud, ITSM, and SIEM.

Responsibilities

• Architect enterprise PAM target-state: privileged account discovery, vaulting, session management, just-in-time access, endpoint privilege management, and machine/service-account controls.
• Integrate PAM architecture with IdP, IGA, SIEM, ITSM, CMDB, cloud platforms, and DevOps pipelines.
• Engineer/prototype reference implementations and policy-as-code patterns to prove designs before regional teams scale them.
• Design the sustainability & governance model: control design, exception governance, ownership, and architecture review cadence.

Skills

Privileged Access Management

IAM / Identity Security

Cloud / DevOps collaboration

Education

Bachelor’s degree in Cybersecurity/CS/IT/Engineering

Tools

CyberArk

BeyondTrust

Delinea

Job description

At Danaher, the Architect, Privileged Access Management designs the enterprise PAM architecture across all regions. Global PAM strategy and direction are set by security leadership andIT leadership; the Architect shapes and refines the technical architecture, then owns translating it into adoptable reference designs for privileged human and non-human identities. Thearchitect works independently and integrates with IAM, infrastructure, cloud, and DevOps teams that each own their own architecture and constraints.

This position reports toDirector,Identity Security&Privileged Access Managementand is part of theenterprise-wideDanaher Information Security (DIS)team;this is aremoteassociaterole.

In this role, you will have the opportunity to:

• Architect enterprise PAM target-state: privileged account discovery, vaulted credential management, session isolation/recording, JIT access, break-glass, endpoint privilege management, and machine/service-account controls.
• Integrate PAM architecture with IdP, IGA, SIEM, ITSM, CMDB, cloud platforms, and DevOps pipelines.
• Engineer/prototype reference implementations and policy-as-code patterns to prove designs before regional teams scale them.
• Design the sustainability & governance model: control design, exception governance, ownership, and architecture review cadence.

The essential requirements of the job include:

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering, or related field.
• 9+ years of cybersecurity experience with a focus on identity and access or privileged access management (GCRF P4 Bachelor’s-track minimum; recommended, pending Comp sign-off).
• Experience designing privileged access management architecture — including discovery, vaulting, session management, just-in-time access, endpoint privilege management, and machine/service-account controls.
• Hands-on experience with enterprise PAM platforms (such as CyberArk,BeyondTrust, orDelinea) and integrating them with identity, cloud, ITSM, and SIEM systems.
• Experience working independently with IAM, infrastructure, cloud, and DevOps teams to design and governprivileged-accesscontrols and exceptions.

It would be a plus if you alsopossesspreviousexperience in:

• Experience with non-human identity / secrets management and policy-as-code.
• CISSP, CCSP, CISM, ora relevantPAM platform certification.

Join our winning team today. Together, we’ll accelerate the real-life impact of tomorrow’s science and technology. We partner with customers across the globe to help them solve their most complex challenges, architecting solutions that bring the power of science to life.

For more information, visit www.danaher.com.