Note: The job is a remote job and is open to candidates in USA. Moderna is a biotechnology company focused on advancing mRNA science to transform medicine. The Senior Privileged Access Management Engineer will play a pivotal role in advancing and maturing Moderna’s Privileged Access Management capabilities, focusing on CyberArk-based solutions while collaborating with various teams to ensure secure and scalable access controls.
Responsibilities
- Serve as the engineering subject matter expert for Moderna’s Privileged Access Management program, owning the CyberArk platform and its associated components
- Manage the configuration, administration, maintenance, and ongoing optimization of the CyberArk environment
- Collaborate with business units, application owners, and engineering teams to understand requirements and translate business needs into secure and scalable PAM solutions and technical designs
- Conduct stakeholder interviews and gather application, service, and infrastructure information to support CyberArk onboarding activities
- Define and articulate business and functional requirements based on evolving industry best practices, emerging technologies, and organizational needs
- Partner with DevOps, systems, network, cybersecurity, and infrastructure teams to ensure privileged access management standards are consistently implemented and maintained
- Perform application integration assessments and provide technical guidance on CyberArk integration approaches and options
- Lead and manage the onboarding of privileged accounts into CyberArk, ensuring adherence to established design frameworks and operational standards
- Develop and maintain end-user documentation, knowledge articles, standards, and training materials to support adoption and operational excellence
- Create detailed architecture documentation, implementation plans, technical standards, and solution designs
- Evaluate the existing PAM environment to identify technical, operational, and security enhancement opportunities, driving continuous improvement initiatives
- Participate in disaster recovery planning, capacity management, performance monitoring, maintenance activities, and platform resilience efforts to ensure high availability
- Work closely with Cybersecurity and Governance teams to ensure PAM solutions align with corporate security policies, regulatory requirements, and established standards
- Regularly review, evaluate, and enhance PAM policies, procedures, and controls to maintain strong security compliance and operational effectiveness
- Develop, support, and maintain security policies, standards, and operational processes related to privileged access management
- Stay current on industry trends, threat landscapes, emerging technologies, and evolving identity security practices to help ensure Moderna’s IAM and PAM strategies remain effective and future ready
- Contribute to the overall cybersecurity posture of the organization through adherence to security policies, procedures, and best practices
- Support emergency incidents and planned maintenance activities, including participation in 24x7 support requirements when necessary
Skills
- BS level technical degree or equivalent experience required; Computer Science or Math background preferred
- 8+ years in the technology field, with 4-6+ years working in the identity and access management domain
- 3+ years of experience with CyberArk and Privileged Cloud technologies including hands-on experience with account and safe management, CyberArk administration and configuration, management and troubleshooting of the various CyberArk Privileged Cloud components
- Hands-on experience with DevOps and Agile methodologies, including implementation and administration of CyberArk's secret management technologies such as Credential Provider, Secrets Hub and Conjur (Cloud or Enterprise)
- Proficiency in English (verbal and/or written) required due to global collaboration needs
- Experience with Privileged Access Management principles, best practices, and technologies
- Familiarity with JIT, Least privileged and dynamic privilege concepts
- Strong understanding of virtualization and cloud platforms with knowledge of AWS infrastructure and architecture. Familiarity with other cloud platforms, such as Azure, or GCP a plus
- Knowledge of both Windows and Unix platforms, with programming (PowerShell, etc.) a plus
- Understanding of DevOps pipeline and CI\CD tools
- Knowledge and understanding of APIs, specifically RESTful APIs, and familiarity with service-oriented architecture and web services integration
- Self-starter with ability to work in a team environment, with demonstrated ability to manage multiple competing tasks simultaneously and complete work within allocated timeframes
- Strong knowledge of Information Security frameworks and security architecture frameworks
- Strong analytical and problem-solving skills
- Ability to work independently and as part of a team
- Relevant certifications such as CISSP, CISM, or CISA are a plus
- CyberArk certification a plus
- Experience with GxP environments and regulatory requirements
- Understanding of security risks and implementation of mitigating controls, and ability to convey risk to all levels of the business, from management to operations and development teams
- Excellent communication and interpersonal skills, including writing and presentation skills
- Embrace a culture of continuous service improvement and service excellence
- A desire to make an impact as part of a high-growth, transformational company that is Bold, Relentless, Curious, and Collaborative
Benefits
- Competitive healthcare, plus voluntary benefit programs to support your unique needs
- A holistic approach to well-being, with access to fitness, mindfulness, and mental health support
- Family planning benefits, including fertility, adoption, and surrogacy support
- Generous paid time off, including vacation, volunteer days, sabbatical, global recharge days, and a discretionary year-end shutdown
- Savings and investments to help you plan for the future
- Location-specific perks and extras
- The successful candidate may be eligible for an annual discretionary bonus, other incentive compensation, or equity award, subject to company plan eligibility criteria and individual performance
Company Overview