Architect, Privileged Access Management

At Danaher theArchitect Privileged Access Managementdesigns the enterprise PAM architecture across all regions. Global PAM strategy and direction are set by security leadership andIT leadership; the Architect shapes and refines the technical architecture then owns translating it into adoptable reference designs for privileged human and non-human identities. Thearchitect works independently and integrates with IAM infrastructure cloud and DevOps teams that each own their own architecture and constraints.

This position reports toDirectorIdentity Security&Privileged Access Managementand is part of theenterprise-wideDanaher Information Security (DIS)team;this is aremoteassociaterole.

In this role you will have the opportunity to:

• Architect enterprise PAM target-state: privileged account discovery vaulted credential management session isolation/recording JIT access break-glass endpoint privilege management and machine/service-account controls.

• Integrate PAM architecture with IdP IGA SIEM ITSM CMDB cloud platforms and DevOps pipelines.

• Engineer/prototype reference implementations and policy-as-code patterns to prove designs before regional teams scale them.

• Design the sustainability & governance model: control design exception governance ownership and architecture review cadence.

The essential requirements of the job include:

• Bachelors degree in Cybersecurity Computer Science Information Technology Engineering or related field.

• 9 years of cybersecurity experience with a focus on identity and access or privileged access management (GCRF P4 Bachelors-track minimum; recommended pending Comp sign-off).

• Experience designing privileged access management architecture including discovery vaulting session management just-in-time access endpoint privilege management and machine/service-account controls.

• Hands-on experience with enterprise PAM platforms (such as CyberArkBeyondTrust orDelinea) and integrating them with identity cloud ITSM and SIEM systems.

• Experience working independently with IAM infrastructure cloud and DevOps teams to design and governprivileged-accesscontrols and exceptions.

It would be a plus if you alsopossesspreviousexperience in:

• Experience with non-human identity / secrets management and policy-as-code.

• CISSP CCSP CISM ora relevantPAM platform certification.