Senior Privileged Access Management Engineer (Cyber Security Engineer)

BioSpace; Norwood (MA); On-site; USD 146,000 - 234,000; Full time

Benefits offered by this job

Competitive healthcare

Discretionary bonus

Paid time off

Job summary

Moderna is expanding its CyberArk-based Privileged Access Management program and seeks an experienced engineer to lead and optimize PAM across cloud and on-premises environments. You will partner with cross-functional teams to design secure PAM solutions, onboard privileged accounts, and develop comprehensive documentation and standards.

Strong DevOps, IAM, and cloud knowledge are essential for success. The role emphasizes collaboration, security-first thinking, and continuous improvement, with

Qualifications

• BS level technical degree or equivalent experience required; Computer Science or Math background preferred
• 8+ years in the technology field, with 4-6+ years working in the identity and access management domain
• 3+ years of experience with CyberArk and Privileged Cloud technologies including hands-on experience with account and safe management, CyberArk administration and configuration, management and troubleshooting of the various CyberArk Privileged Cloud components.
• Hands-on experience with DevOps and Agile methodologies, including implementation and administration of CyberArk’s secret management technologies such as Credential Provider, Secrets Hub and Conjur (Cloud or Enterprise)
• Proficiency in English (verbal and/or written) required due to global collaboration needs

Responsibilities

• Serve as the engineering subject matter expert for Moderna’s Privileged Access Management program, owning the CyberArk platform and its associated components.
• Manage the configuration, administration, maintenance, and ongoing optimization of the CyberArk environment.
• Collaborate with business units, application owners, and engineering teams to understand requirements and translate business needs into secure and scalable PAM solutions and technical designs.
• Conduct stakeholder interviews and gather application, service, and infrastructure information to support CyberArk onboarding activities.
• Define and articulate business and functional requirements based on evolving industry best practices, emerging technologies, and organizational needs.
• Partner with DevOps, systems, network, cybersecurity, and infrastructure teams to ensure privileged access management standards are consistently implemented and maintained.
• Perform application integration assessments and provide technical guidance on CyberArk integration approaches and options.
• Lead and manage the onboarding of privileged accounts into CyberArk, ensuring adherence to established design frameworks and operational standards.
• Develop and maintain end-user documentation, knowledge articles, standards, and training materials to support adoption and operational excellence.
• Create detailed architecture documentation, implementation plans, technical standards, and solution designs.
• Evaluate the existing PAM environment to identify technical, operational, and security enhancement opportunities, driving continuous improvement initiatives.
• Participate in disaster recovery planning, capacity management, performance monitoring, maintenance activities, and platform resilience efforts to ensure high availability.
• Work closely with Cybersecurity and Governance teams to ensure PAM solutions align with corporate security policies, regulatory requirements, and established standards.
• Regularly review, evaluate, and enhance PAM policies, procedures, and controls to maintain strong security compliance and operational effectiveness.
• Develop, support, and maintain security policies, standards, and operational processes related to privileged access management.
• Stay current on industry trends, threat landscapes, emerging technologies, and evolving identity security practices to help ensure Moderna’s IAM and PAM strategies remain effective and future ready.
• Contribute to the overall cybersecurity posture of the organization through adherence to security policies, procedures, and best practices.
• Support emergency incidents and planned maintenance activities, including participation in 24x7 support requirements when necessary.

Skills

IAM experience

CyberArk

DevOps

English proficiency

AWS knowledge

Windows/Unix familiarity

RESTful APIs

CI/CD

Education

BS in Computer Science or related field

Tools

CyberArk

Conjur

Secrets Hub

Credential Provider

Job description

The Role

Joining Moderna means advancing mRNA science to transform medicine. Work with exceptional global teams on a broad pipeline and build a career that makes a real difference for patients.

The Role

Joining Moderna means advancing mRNA science to transform medicine. Work with exceptional global teams on a broad pipeline and build a career that makes a real difference for patients.

Moderna is strengthening its international business services hub in Warsaw, supporting our growing global operations. We welcome professionals ready to help advance our mission and shape the future of mRNA medicines.

This is an opportunity to play a pivotal role in advancing and maturing Moderna’s Privileged Access Management (PAM) capabilities within a rapidly evolving technology and cybersecurity landscape. As a technical subject matter expert, you will drive the design, administration, integration, and continuous improvement of CyberArk-based privileged access solutions across both cloud and on-premises environments.

Working within a highly collaborative and fast-paced environment, you will combine deep technical expertise, intellectual agility, and a security-first mindset to help ensure privileged access controls remain secure, scalable, reliable, and aligned with the needs of a growing global organization. You will partner closely with engineering, infrastructure, security, governance, and business stakeholders while helping shape the future of identity security at Moderna, including opportunities to leverage automation, digital innovation, and emerging AI-driven capabilities to enhance operational effectiveness and security outcomes.

Here’s What You’ll Do

• Serve as the engineering subject matter expert for Moderna’s Privileged Access Management program, owning the CyberArk platform and its associated components.


• Manage the configuration, administration, maintenance, and ongoing optimization of the CyberArk environment.


• Collaborate with business units, application owners, and engineering teams to understand requirements and translate business needs into secure and scalable PAM solutions and technical designs.


• Conduct stakeholder interviews and gather application, service, and infrastructure information to support CyberArk onboarding activities.


• Define and articulate business and functional requirements based on evolving industry best practices, emerging technologies, and organizational needs.


• Partner with DevOps, systems, network, cybersecurity, and infrastructure teams to ensure privileged access management standards are consistently implemented and maintained.


• Perform application integration assessments and provide technical guidance on CyberArk integration approaches and options.


• Lead and manage the onboarding of privileged accounts into CyberArk, ensuring adherence to established design frameworks and operational standards.


• Develop and maintain end-user documentation, knowledge articles, standards, and training materials to support adoption and operational excellence.


• Create detailed architecture documentation, implementation plans, technical standards, and solution designs.


• Evaluate the existing PAM environment to identify technical, operational, and security enhancement opportunities, driving continuous improvement initiatives.


• Participate in disaster recovery planning, capacity management, performance monitoring, maintenance activities, and platform resilience efforts to ensure high availability.


• Work closely with Cybersecurity and Governance teams to ensure PAM solutions align with corporate security policies, regulatory requirements, and established standards.


• Regularly review, evaluate, and enhance PAM policies, procedures, and controls to maintain strong security compliance and operational effectiveness.


• Develop, support, and maintain security policies, standards, and operational processes related to privileged access management.


• Stay current on industry trends, threat landscapes, emerging technologies, and evolving identity security practices to help ensure Moderna’s IAM and PAM strategies remain effective and future ready.


• Contribute to the overall cybersecurity posture of the organization through adherence to security policies, procedures, and best practices.


• Support emergency incidents and planned maintenance activities, including participation in 24x7 support requirements when necessary.

The key Moderna Mindsets you’ll need to succeed in the role

• “We obsess over learning. We don’t have to be the smartest we have to learn the fastest.”


• “We digitize everywhere possible using the power of code to maximize our impact on patients.”

Here’s What You’ll Need (Minimum Qualifications)

• BS level technical degree or equivalent experience required; Computer Science or Math background preferred


• 8+ years in the technology field, with 4-6+ years working in the identity and access management domain


• 3+ years of experience with CyberArk and Privileged Cloud technologies including hands‑on experience with account and safe management, CyberArk administration and configuration, management and troubleshooting of the various CyberArk Privileged Cloud components.


• Hands‑on experience with DevOps and Agile methodologies, including implementation and administration of CyberArk’s secret management technologies such as Credential Provider, Secrets Hub and Conjur (Cloud or Enterprise)


• Proficiency in English (verbal and/or written) required due to global collaboration needs

Here’s What You’ll Bring to the Table (Preferred Qualifications)

• Experience with Privileged Access Management principles, best practices, and technologies


• Familiarity with JIT, Least privileged and dynamic privilege concepts


• Strong understanding of virtualization and cloud platforms with knowledge of AWS infrastructure and architecture. Familiarity with other cloud platforms, such as Azure, or GCP a plus.


• Knowledge of both Windows and Unix platforms, with programming (PowerShell, etc.) a plus.


• Understanding of DevOps pipeline and CI/CD tools


• Knowledge and understanding of APIs, specifically RESTful APIs, and familiarity with service-oriented architecture and web services integration.


• Self-starter with ability to work in a team environment, with demonstrated ability to manage multiple competing tasks simultaneously and complete work within allocated timeframes


• Strong knowledge of Information Security frameworks and security architecture frameworks.


• Strong analytical and problem-solving skills


• Ability to work independently and as part of a team


• Relevant certifications such as CISSP, CISM, or CISA are a plus


• CyberArk certification a plus


• Experience with GxP environments and regulatory requirements


• Understanding of security risks and implementation of mitigating controls, and ability to convey risk to all levels of the business, from management to operations and development teams


• Excellent communication and interpersonal skills, including writing and presentation skills


• Embrace a culture of continuous service improvement and service excellence


• A desire to make an impact as part of a high-growth, transformational company that is Bold, Relentless, Curious, and Collaborative

Pay & Benefits

At Moderna, we believe that when you feel your best, you can do your best work. That’s why our benefits and well‑being resources are designed to support you at work, at home, and everywhere in between.

• Competitive healthcare, plus voluntary benefit programs to support your unique needs


• A holistic approach to well‑being, with access to fitness, mindfulness, and mental health support


• Family planning benefits, including fertility, adoption, and surrogacy support


• Generous paid time off, including vacation, volunteer days, sabbatical, global recharge days, and a discretionary year-end shutdown


• Savings and investments to help you plan for the future


• Location‑specific perks and extras

The salary range for this role is $145,900.00 - $234,200.00. This is the lowest to highest salary we in good faith believe we would pay for this role at the time of this posting. An individual’s position within the salary range will be based on several factors including, but not limited to, specific competencies, relevant education, qualifications, certifications, experience, skills, performance, and business or organizational needs. The successful candidate may be eligible for an annual discretionary bonus, other incentive compensation, or equity award, subject to company plan eligibility criteria and individual performance.

About Moderna

Since our founding in 2010, we have aspired to build the leading mRNA technology platform, the infrastructure to reimagine how medicines are created and delivered, and a world-class team. We believe in giving our people a platform to change medicine and an opportunity to change the world.

By living our mission, values, and mindsets every day, our people are the driving force behind our scientific progress and our culture. Together, we are creating a culture of belonging and building an organization that cares deeply for our patients, our employees, the environment, and our communities.

We are proud to have been recognized as a Science Magazine Top Biopharma Employer, a Fast Company Best Workplace for Innovators, and a Great Place to Work in the U.S.

If you want to make a difference and join a team that is changing the future of medicine, we invite you to visit modernatx.com/careers to learn more about our current opportunities.

Our Working Model

As we build our company, we have always believed an in-person culture is critical to our success. Moderna champions the significant benefits of in-office collaboration by embracing a 70/30 work model. This 70% in-office structure helps to foster a culture rich in innovation, teamwork, and direct mentorship. Join us in shaping a world where every interaction is an opportunity to learn, contribute, and make a meaningful impact.

Moderna is a smoke-free, alcohol-free, and drug-free work environment.

Equal Opportunities

Moderna is committed to equal employment opportunity and non-discrimination for all employees and qualified applicants without regard to a person’s race, color, sex, gender identity or expression, age, religion, national origin, ancestry or citizenship, ethnicity, disability, military or protected veteran status, genetic information, sexual orientation, marital or familial status, or any other personal characteristic protected under applicable law. Moderna is a place where everyone can grow. If you meet the Basic Qualifications for the role and you would be excited to contribute to our mission every day,

Accommodations

We’re focused on attracting, retaining, developing, and advancing our employees. By cultivating a workplace that values diverse experiences, backgrounds, and ideas, we create an environment where every employee can contribute their best.

Moderna is committed to offering reasonable accommodations to qualified job applicants with disabilities. Any applicant requiring an accommodation in connection with the hiring process and/or to perform the essential functions of the position for which the applicant has applied should contact the Accommodations team at [e-mail].

Export Control Notice

This position may involve access to technology or data that is subject to U.S. export control laws, including the Export Administration Regulations (EAR). As such, employment is contingent upon the applicant’s ability to access export-controlled information in accordance with U.S. law. Due to the nature of the work and regulatory requirements, only individuals who qualify as U.S. persons (citizens, permanent residents, asylees, or refugees) are eligible for this position. For this role Moderna is unable to sponsor non-U.S. persons to apply for an export control license.