Engineer, Privileged Access Management
RemoteBrazil
Job Summary
Build, configure, and operate the PAM platform by onboarding privileged accounts, operationalizing least privilege, and managing safes, policies, connectors, session recording, and password rotation. Develop automation using PowerShell, Python, and REST APIs for onboarding, rotation, and reconciliation tasks. Coordinate with system owners across teams to execute assigned scope independently while contributing reference-pattern implementation and feeding operational reality back into design. Maintain sustainability through runbooks, health checks, and managed-account ownership records. This role reports to the Director, Identity Security within the Danaher Information Security team, supporting global life sciences and biotechnology partners with complex security challenges.
Required Qualifications
- Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or related field
- 9+ years of cybersecurity or IT experience with hands-on privileged access management
- Hands-on experience operating enterprise PAM platforms (such as CyberArk, BeyondTrust, or Delinea): onboarding, vaulting, password rotation, session recording, and discovery
- Experience with Active Directory, Windows/Linux administration, and cloud IAM in support of privileged account management
- Experience automating PAM tasks with scripting (such as PowerShell or Python) and REST APIs
Desired Qualifications
- Experience with endpoint privilege management or cloud PAM
- CyberArk Defender/Guardian, Security+, or a cloud security certification
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.