Sr. Privileged Access Management Engineer

The Role

In this role, you will be responsible for growing and maturing Moderna’s Privileged Access Management (PAM). The individual must have a proven track record in delivering identity solutions that are functional, secure, scalable, and reliable. As a member of a small team in a fast-paced environment, this role will require both strong intellectual agility and hands-on technical skill.

The ideal candidate will have in-depth experience with CyberArk platform and its various integrations across on-prem and cloud environments.

Here’s What You’ll Do

• Engineering SME for the privileged access management program, managing the CyberArk platform and all its components, including configuration, administration, and maintenance.

• Collaborate with business units and engineering teams to understand their needs and translate them into technical requirements and designs for PAM systems and processes.

• Conduct interviews and collect pertinent information from applications, services, and teams to prepare for CyberArk onboarding activities

• Articulate business & functional requirements based on evolving best practices and technologies

• Work with devops/system/network/security administrators, and others to ensure privileged access management standards are followed

• Perform application integration assessments and advise on integration options.

• Manage the onboarding of accounts into CyberArk, adhering to a logical design framework

• Develop and maintain end-user documentation and provide relevant training.

• Develop detailed architecture, standards, design, and implementation documentation.

• Analyze the current PAM environment to identify technical and operational opportunities and develop continuous improvement action plans.

• Participate in disaster recovery, capacity planning, performance monitoring, and maintenance to ensure high availability.

• Work with the broader Cybersecurity and governance organizations to ensure policies and standards are properly followed by the PAM solutions

• Regularly review and enhance PAM policies and procedures to ensure security compliance.

• Create and support security policies, standards, and processes related to PAM

• Stay current with industry trends and emerging technologies to ensure the organization's IAM strategy remains effective and up-to-date.

• Contribute to the overall security of the organization by adhering to security policies and procedures

• Provide 24x7 support as needed for emergency situations and planned maintenance activities

Here’s What You’ll Need (Minimum Qualifications)

• BS level technical degree or equivalent experience required; Computer Science or Math background preferred

• 8+ years in the technology field, with 4-6+ years working in the identity and access management domain

• 3+ years of experience with CyberArk and Privileged Cloud technologies including hands-on experience with account and safe management, CyberArk administration and configuration, management and troubleshooting of the various CyberArk Privileged Cloud components.

• Hands-on experience with DevOps and Agile methodologies, including implementation and administration of CyberArk’s secret management technologies such as Credential Provider, Secrets Hub and Conjur (Cloud or Enterprise).

Here’s What You’ll Bring to the Table (Preferred Qualifications)

• Experience with Privileged Access Management principles, best practices, and technologies

• Familiarity with JIT, Least privileged and dynamic privilege concepts

• Strong understanding of virtualization and cloud platforms with knowledge of AWS infrastructure and architecture. Familiarity with other cloud platforms, such as Azure, or GCP a plus.

• Knowledge of both Windows and Unix platforms, with programming (PowerShell, etc.) a plus.

• Understanding of DevOps pipeline and CI\CD tools

• Knowledge and understanding of APIs, specifically RESTful APIs, and familiarity with service-oriented architecture and web services integration.

• Self-starter with ability to work in a team environment, with demonstrated ability to manage multiple competing tasks simultaneously and complete work within allocated timeframes

• Strong knowledge of Information Security frameworks and security architecture frameworks.

• Strong analytical and problem-solving skills

• Ability to work independently and as part of a team

• Relevant certifications such as CISSP, CISM, or CISA are a plus

• CyberArk certification a plus

• Experience with GxP envi