Senior PAM Engineer — CyberArk IAM Expert

BioSpace; Norwood (MA); On-site; USD 146,000 - 234,000; Full time

Benefits offered by this job

Competitive healthcare

Discretionary bonus

Paid time off

Job summary

Moderna is expanding its CyberArk-based Privileged Access Management program and seeks an experienced engineer to lead and optimize PAM across cloud and on-premises environments. You will partner with cross-functional teams to design secure PAM solutions, onboard privileged accounts, and develop comprehensive documentation and standards.

Strong DevOps, IAM, and cloud knowledge are essential for success. The role emphasizes collaboration, security-first thinking, and continuous improvement, with

Qualifications

• BS level technical degree or equivalent experience required; Computer Science or Math background preferred
• 8+ years in the technology field, with 4-6+ years working in the identity and access management domain
• 3+ years of experience with CyberArk and Privileged Cloud technologies including hands-on experience with account and safe management, CyberArk administration and configuration, management and troubleshooting of the various CyberArk Privileged Cloud components.
• Hands-on experience with DevOps and Agile methodologies, including implementation and administration of CyberArk’s secret management technologies such as Credential Provider, Secrets Hub and Conjur (Cloud or Enterprise)
• Proficiency in English (verbal and/or written) required due to global collaboration needs

Responsibilities

• Serve as the engineering subject matter expert for Moderna’s Privileged Access Management program, owning the CyberArk platform and its associated components.
• Manage the configuration, administration, maintenance, and ongoing optimization of the CyberArk environment.
• Collaborate with business units, application owners, and engineering teams to understand requirements and translate business needs into secure and scalable PAM solutions and technical designs.
• Conduct stakeholder interviews and gather application, service, and infrastructure information to support CyberArk onboarding activities.
• Define and articulate business and functional requirements based on evolving industry best practices, emerging technologies, and organizational needs.
• Partner with DevOps, systems, network, cybersecurity, and infrastructure teams to ensure privileged access management standards are consistently implemented and maintained.
• Perform application integration assessments and provide technical guidance on CyberArk integration approaches and options.
• Lead and manage the onboarding of privileged accounts into CyberArk, ensuring adherence to established design frameworks and operational standards.
• Develop and maintain end-user documentation, knowledge articles, standards, and training materials to support adoption and operational excellence.
• Create detailed architecture documentation, implementation plans, technical standards, and solution designs.
• Evaluate the existing PAM environment to identify technical, operational, and security enhancement opportunities, driving continuous improvement initiatives.
• Participate in disaster recovery planning, capacity management, performance monitoring, maintenance activities, and platform resilience efforts to ensure high availability.
• Work closely with Cybersecurity and Governance teams to ensure PAM solutions align with corporate security policies, regulatory requirements, and established standards.
• Regularly review, evaluate, and enhance PAM policies, procedures, and controls to maintain strong security compliance and operational effectiveness.
• Develop, support, and maintain security policies, standards, and operational processes related to privileged access management.
• Stay current on industry trends, threat landscapes, emerging technologies, and evolving identity security practices to help ensure Moderna’s IAM and PAM strategies remain effective and future ready.
• Contribute to the overall cybersecurity posture of the organization through adherence to security policies, procedures, and best practices.
• Support emergency incidents and planned maintenance activities, including participation in 24x7 support requirements when necessary.

Skills

IAM experience

CyberArk

DevOps

English proficiency

AWS knowledge

Windows/Unix familiarity

RESTful APIs

CI/CD

Education

BS in Computer Science or related field

Tools

CyberArk

Conjur

Secrets Hub

Credential Provider

Job description

Moderna is expanding its CyberArk-based Privileged Access Management program and seeks an experienced engineer to lead and optimize PAM across cloud and on-premises environments. You will partner with cross-functional teams to design secure PAM solutions, onboard privileged accounts, and develop comprehensive documentation and standards.

Strong DevOps, IAM, and cloud knowledge are essential for success. The role emphasizes collaboration, security-first thinking, and continuous improvement, with