Privileged Access Management Lead – Zero-Trust Security

PowerToFly; Kalamazoo (MI); Remote; USD 136,000 - 294,000; Full time

Benefits offered by this job

Health benefits

401(k) with company match

Job summary

Stryker is seeking a PAM Manager to lead the Privileged Access Management program across on‑premises, cloud, and hybrid environments. You will own the PAM strategy and operating model, supervise a team of analysts, and collaborate with Infrastructure, Cloud, Security Operations, and Audit teams to reduce risk and ensure regulatory compliance.

You'll oversee privileged account lifecycles, break-glass procedures, and third‑party access, with attention to SOX, HIPAA, ISO 27001, and NIST

Qualifications

• Bachelor’s degree in a technical field or related discipline.
• Minimum eight years in identity or cybersecurity with at least four years in PAM.
• Hands-on experience deploying CyberArk, BeyondTrust, or Delinea.
• Experience securing privileged access across cloud and on‑prem environments.

Responsibilities

• Own enterprise PAM strategy, roadmap, and operating model.
• Lead deployment and operation of privileged access management tooling.
• Manage privileged account lifecycle and session monitoring.
• Design break-glass procedures and third-party access controls.
• Partner with cross-functional teams to onboard privileged accounts.
• Support SOX, HIPAA, ISO 27001, and NIST controls via audits.

Skills

PAM management

CyberArk

Just-in-time access

Endpoint privilege management

Zero Trust

Leadership

Education

Bachelor's degree in Computer Science or related

Tools

CyberArk

BeyondTrust

Delinea

Azure

AWS

GCP

Job description

Stryker is seeking a PAM Manager to lead the Privileged Access Management program across on‑premises, cloud, and hybrid environments. You will own the PAM strategy and operating model, supervise a team of analysts, and collaborate with Infrastructure, Cloud, Security Operations, and Audit teams to reduce risk and ensure regulatory compliance.

You'll oversee privileged account lifecycles, break-glass procedures, and third‑party access, with attention to SOX, HIPAA, ISO 27001, and NIST