Privileged Access Management Engineer (Cyber Security Engineer)

Moderna Therapeutics - Princeton, NJ

Full-time - Mid Level

Princeton, NJ

Professional, Scientific, and Technical Services

About the position

In this role, you will be responsible for growing and maturing Moderna's Privileged Access Management (PAM) program. The position requires a proven track record in delivering identity solutions that are functional, secure, scalable, and reliable. As part of a small team in a fast-paced environment, the role demands strong intellectual agility and hands-on technical skills, particularly with the CyberArk platform and its integrations across on-prem and cloud environments.

Responsibilities

• Serve as the Engineering SME for the privileged access management program, managing the CyberArk platform and its components.
• Collaborate with business units and engineering teams to understand their needs and translate them into technical requirements for PAM systems.
• Conduct interviews and collect information from applications and teams for CyberArk onboarding activities.
• Articulate business and functional requirements based on best practices and technologies.
• Ensure privileged access management standards are followed by working with various administrators.
• Perform application integration assessments and advise on integration options.
• Manage the onboarding of accounts into CyberArk, adhering to a logical design framework.
• Develop and maintain end-user documentation and provide relevant training.
• Create detailed architecture, standards, design, and implementation documentation.
• Analyze the current PAM environment to identify opportunities for improvement and develop action plans.
• Participate in disaster recovery, capacity planning, and performance monitoring to ensure high availability.
• Work with Cybersecurity and governance organizations to ensure compliance with policies and standards.
• Regularly review and enhance PAM policies and procedures for security compliance.
• Create and support security policies, standards, and processes related to PAM.
• Stay current with industry trends and emerging technologies to maintain an effective IAM strategy.
• Provide 24x7 support for emergency situations and planned maintenance activities.

Requirements

• BS level technical degree or equivalent experience required; Computer Science or Math background preferred.
• 8+ years in the technology field, with 4-6+ years in identity and access management.
• 3+ years of experience with CyberArk and Privileged Cloud technologies, including hands-on experience with account and safe management.
• Hands-on experience with DevOps and Agile methodologies, including CyberArk's secret management technologies.

Nice-to-haves

• Experience with Privileged Access Management principles and best practices.
• Familiarity with JIT, Least privileged, and dynamic privilege concepts.
• Strong understanding of virtualization and cloud platforms, particularly AWS.
• Familiarity with Azure or GCP is a plus.
• Knowledge of Windows and Unix platforms, with programming skills (PowerShell, etc.) a plus.
• Understanding of DevOps pipeline and CICD tools.
• Knowledge of APIs, specifically RESTful APIs, and familiarity with service-oriented architecture.
• Strong analytical and problem-solving skills.
• Relevant certifications such as CISSP, CISM, or CISA are a plus.
• CyberArk certification is a plus.
• Experience with GxP environments and regulatory requirements.

Benefits

• Highly competitive and inclusive medical, dental and vision coverage options.
• Flexible Spending Accounts for medical and dependent care expenses.
• Lifestyle Spending Account funds for personal enrichment and self-care activities.
• Family care benefits, including subsidized back-up care options and on-demand tutoring.
• Free premium access to fitness, nutrition, and mindfulness classes.
• Exclusive preferred pricing on Peloton fitness equipment.
• Adoption and family-planning benefits.
• Dedicated care coordination support for the LGBTQ+ community.
• Generous paid time off, including vacation, sick time, and holidays.
• Volunteer time to participate within the community.
• Discretionary year-end shutdown.
• Paid sabbatical after 5 years; every 3 years thereafter.
• Generous Paid Leave offerings, including 18 weeks of 100% paid parental leave for all new parents.
• 401k match and Financial Planning tools.
• Moderna-paid Life, LTD and STD insurance coverages, as well as voluntary benefit options.
• Complimentary concierge service for home services, travel booking, and entertainment requests.
• Free parking or subsidized commuter passes.