Engineer, Privileged Access Management

At Danaher theEngineerPrivileged Access Managementbuilds configuresoperates and troubleshoots the PAM platform. Strategy and architecture are set by leadership and the PAM Architect/Global Lead; the Engineer executes within that design onboarding privileged accounts and operationalizing least privilege. The Engineer works independently on assigned scope and coordinates with system owners across teams with their own environments.

This position reports to theDirectorIdentity Securityand is part of theDanaher Information Security (DIS)Identity & Privileged Access Managementteam; thisposition isremote.

In this role you will have the opportunity to:

• Engineer/operatePAM platforms: safes policies connectors session recording password rotation discovery jobs endpoint privilege policies and integrations.

• Build automation (PowerShell/Python REST APIs) for onboarding rotation and reconciliation.

• Contribute toreference-patternimplementation defined by the Architect; feed operational reality back into design.

• Support the sustainability model: runbooks health checks andmanaged-accountownership records.

The essential requirements of the job include:

• Bachelors degree in Cybersecurity Computer Science Information Technology Engineering or related field.

• 9 years of cybersecurity or IT experience with hands-on privileged access management.

• Hands-on experience operating enterprise PAM platforms (such as CyberArkBeyondTrust orDelinea): onboarding vaulting password rotation session recording and discovery.

• Experience with Active Directory Windows/Linux administration and cloud IAM in support of privileged account management.

• Experience automating PAM tasks with scripting (such as PowerShell or Python) and REST APIs.

It would be a plus if you alsopossesspreviousexperience in:

• Experience with endpoint privilege management or cloud PAM.

• CyberArk Defender/Guardian Security ora cloudsecurity certification.