SR Information Security Engineer - IS-Mod

Mayo Foundation for Medical Education and Research; Rochester (MN); Hybrid; USD 134,000 - 195,000; Full time

Benefits offered by this job

Medical plans

Dental coverage

Vision plan

HSA & FSAs

Retirement plan

Job summary

Mayo Clinic is seeking a Senior Information Security Engineer to lead advanced security initiatives and provide technical authority across domains. You will architect PAM solutions, implement CyberArk/Idira, and ensure credential rotation, session isolation, and recording across a large environment.

You will collaborate with IT, application, and clinical teams to reduce risk while maintaining patient care. This role requires healthcare security experience and strong scripting abilities.

Qualifications

• Bachelor’s degree in applicable field plus five (5) years of relevant experience.
• Master’s degree in applicable field plus four (4) years preferred.
• One or more of CISSP, CISM, GSEC, OSCP required at time of hire.

Responsibilities

• Lead complex security engineering initiatives addressing enterprise risk and regulatory requirements.
• Serve as technical architect for privileged access management (PAM) across the enterprise; implement CyberArk/Idira solutions and related tooling.
• Design, implement, and optimize credential rotation, session isolation, and recording through CPM/PSM.
• Partner with infrastructure, application, and clinical teams to reduce privileged access risk without impacting patient care operations.

Skills

Information security

Security architecture

Education

Bachelor’s degree in applicable field

Master’s degree in applicable field

Job description

Why Mayo Clinic

Mayo Clinic is top-ranked in more specialties than any other care provider according to U.S. News & World Report. As we work together to put the needs of the patient first, we are also dedicated to our employees, investing in competitive compensation and comprehensive benefit plans– to take care of you and your family, now and in the future. And with continuing education and advancement opportunities at every turn, you can build a long, successful career with Mayo Clinic.

Benefits Highlights

• Medical:Multiple plan options.
• Dental:Delta Dental or reimbursement account for flexible coverage.
• Vision:Affordable plan with national network.
• Pre-Tax Savings:HSA and FSAs for eligible expenses.
• Retirement: Competitive retirement package to secure your future.

Responsibilities

The Senior Information Security Engineer is a senior-level technical position responsible for leading complex security engineering initiatives and providing advanced expertise across multiple information security domains. The position operates with significant autonomy, serves as a technical authority, and is accountable for designing, implementing, and optimizing security solutions that address enterprise risk, regulatory requirements, and business objectives.

The ideal candidate serves as a technical architect for privileged access management, leading the design and implementation of PAM solutions across the enterprise and setting the technical direction others build against. This includes demonstrated experience administering and supporting CyberArk/Idira solutions in a large, complex environment, including Privilege Cloud, secrets management (Conjur, Secrets Hub, and Central Credential Provider), and Endpoint Privilege Manager, as well as hands‑on work onboarding privileged accounts, designing safe and platform structures, and implementing credential rotation, session isolation, and session recording through CPM and PSM. Familiarity with the Microsoft administrative tier model and why Tier 0 and Tier 1 access warrants the strongest protections is expected. Experience integrating privileged access controls with identity governance, MFA and SIEM platforms is strongly preferred, as is proficiency with scripting and automation (PowerShell, Python, and REST APIs) to streamline onboarding, reporting, and day‑to‑day operations.

Equally important is the ability to partner effectively with infrastructure, application, and clinical technology teams to reduce privileged access risk without disrupting patient care operations. Candidates should be able to explain privileged access requirements and associated risk clearly to both technical staff and leadership, and should bring experience supporting audit and regulatory requirements in healthcare or another highly regulated industry.

This vacancy is not eligible for sponsorship/ we will not sponsor or transfer visas for this position. Also, Mayo Clinic DOES NOT participate in the F‑1 STEM OPT extension program.

Qualifications

Bachelor’s degree in applicable field plus five (5) years of relevant experience. Pertinent fields of study and experience include, but are not limited to, information security, computer science, information systems, engineering, or a related field.

Master’s degree in applicable field plus four (4) years of relevant experience preferred. Pertinent fields of study and experience include, but are not limited to, information security, computer science, information systems, engineering, or a related field.

One or more of the following certifications (or equivalent) are required at time of hire: CISSP, CISM, GSEC, OSCP.

Exemption Status

Exempt

Compensation Detail

$134,347 - $194,750 / year;

Benefits Eligible

Yes

Schedule

Full Time

Hours/Pay Period

80

Schedule Details

Monday - Friday Days This is a hybrid position and must be located within 100 miles of a Mayo Clinic campus for occasional on‑site expectations based on business needs in Rochester MN.

Weekend Schedule

Weekends if on call projects dictate Participates in 24/7 on call rotation with on call occurring approx. every 6 weeks.

International Assignment

No

Site Description

Just as our reputation has spread beyond our Minnesota roots, so have our locations. Today, our employees are located at our three major campuses in Phoenix/Scottsdale, Arizona, Jacksonville, Florida, Rochester, Minnesota, and at Mayo Clinic Health System campuses throughout Midwestern communities, and at our international locations. Each Mayo Clinic location is a special place where our employees thrive in both their work and personal lives. Learn more about what each unique Mayo Clinic campus has to offer, and where your best fit is.

Equal Opportunity

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender identity, sexual orientation, national origin, protected veteran status or disability status. Learn more about the 'EOE is the Law'. Mayo Clinic participates in E‑Verify and may provide the Social Security Administration and, if necessary, the Department of Homeland Security with information from each new employee's Form I-9 to confirm work authorization.