NHI Security Manager: Machine & Workload Identities

Stryker; Kalamazoo (MI); Hybrid; USD 136,000 - 225,000; Full time

Job summary

Stryker Corporation is seeking a Manager of Cybersecurity for Non-Human Identity Security, with remote work options and preference for Eastern/Central time zones. You will lead the enterprise program securing machine and workload identities across cloud and on‑prem environments, guiding the entire identity lifecycle and reducing credential risk.

The role partners with Platform Engineering, Cloud, DevOps, Security Operations, and Applications teams to enforce least-privilege and automate

Qualifications

• 8+ years of experience in identity, cloud, or cybersecurity with focus on non-human identity security
• Hands-on experience with secrets management platforms and PKI
• Experience securing cloud workload identities and service principals in major clouds
• Knowledge of compliance frameworks (SOX, HIPAA, ISO 27001, NIST CSF) and audit reporting

Responsibilities

• Own the enterprise non-human identity security strategy, roadmap, operating model, governance, and reporting
• Establish identity controls for API credentials and emerging AI agent identities
• Support SOX, HIPAA, ISO 27001, and NIST CSF compliance through risk reporting
• Deploy and operate secrets management and machine identity platforms
• Automate secret rotation and enforce least-privilege across CI/CD pipelines

Skills

Non-human identity security

Cloud workload security

Zero Trust

Identity & access management

CI/CD security

Leadership

Education

Bachelor's degree in CS / Cybersecurity / IS / Engineering

Master's degree (preferred)

Tools

HashiCorp Vault

CyberArk Conjur

Azure Key Vault

Venafi

Job description

Stryker Corporation is seeking a Manager of Cybersecurity for Non-Human Identity Security, with remote work options and preference for Eastern/Central time zones. You will lead the enterprise program securing machine and workload identities across cloud and on‑prem environments, guiding the entire identity lifecycle and reducing credential risk.

The role partners with Platform Engineering, Cloud, DevOps, Security Operations, and Applications teams to enforce least-privilege and automate