Senior Privileged Access Security Engineer

Mayo Foundation for Medical Education and Research; Rochester (MN); Hybrid; USD 134,000 - 195,000; Full time

Benefits offered by this job

Medical plans

Dental coverage

Vision plan

HSA & FSAs

Retirement plan

Job summary

Mayo Clinic is seeking a Senior Information Security Engineer to lead advanced security initiatives and provide technical authority across domains. You will architect PAM solutions, implement CyberArk/Idira, and ensure credential rotation, session isolation, and recording across a large environment.

You will collaborate with IT, application, and clinical teams to reduce risk while maintaining patient care. This role requires healthcare security experience and strong scripting abilities.

Qualifications

• Bachelor’s degree in applicable field plus five (5) years of relevant experience.
• Master’s degree in applicable field plus four (4) years preferred.
• One or more of CISSP, CISM, GSEC, OSCP required at time of hire.

Responsibilities

• Lead complex security engineering initiatives addressing enterprise risk and regulatory requirements.
• Serve as technical architect for privileged access management (PAM) across the enterprise; implement CyberArk/Idira solutions and related tooling.
• Design, implement, and optimize credential rotation, session isolation, and recording through CPM/PSM.
• Partner with infrastructure, application, and clinical teams to reduce privileged access risk without impacting patient care operations.

Skills

Information security

Security architecture

Education

Bachelor’s degree in applicable field

Master’s degree in applicable field

Job description

Mayo Clinic is seeking a Senior Information Security Engineer to lead advanced security initiatives and provide technical authority across domains. You will architect PAM solutions, implement CyberArk/Idira, and ensure credential rotation, session isolation, and recording across a large environment.

You will collaborate with IT, application, and clinical teams to reduce risk while maintaining patient care. This role requires healthcare security experience and strong scripting abilities.