PRIVILEGED ACCESS MANAGEMENT ENGINEER (CYBER SECURITY ENGINEER)

The RoleIn this role, you will be responsible for growing and maturing Moderna’s Privileged Access Management (PAM). The individual must have a proven track record in delivering identity solutions that are functional, secure, scalable, and reliable. As a member of a small team in a fast-paced environment, this role will require both strong intellectual agility and hands-on technical skill.The ideal candidate will have in-depth experience with CyberArk platform and its various integrations across on-prem and cloud environments.Here’s What You’ll DoEngineering SME for the privileged access management program, managing the CyberArk platform and all its components, including configuration, administration, and maintenance.Collaborate with business units and engineering teams to understand their needs and translate them into technical requirements and designs for PAM systems and processes.Conduct interviews and collect pertinent information from applications, services, and teams to prepare for CyberArk onboarding activitiesArticulate business & functional requirements based on evolving best practices and technologiesWork with devops/system/network/security administrators, and others to ensure privileged access management standards are followedPerform application integration assessments and advise on integration options.Manage the onboarding of accounts into CyberArk, adhering to a logical design frameworkDevelop and maintain end-user documentation and provide relevant training.Develop detailed architecture, standards, design, and implementation documentation.Analyze the current PAM environment to identify technical and operational opportunities and develop continuous improvement action plans.Participate in disaster recovery, capacity planning, performance monitoring, and maintenance to ensure high availability.Work with the broader Cybersecurity and governance organizations to ensure policies and standards are properly followed by the PAM solutionsRegularly review and enhance PAM policies and procedures to ensure security compliance.Create and support security policies, standards, and processes related to PAMStay current with industry trends and emerging technologies to ensure the organization's IAM strategy remains effective and up-to-date.Contribute to the overall security of the organization by adhering to security policies and proceduresProvide 24x7 support as needed for emergency situations and planned maintenance activitiesHere’s What You’ll Need (Minimum Qualifications)BS level technical degree or equivalent experience required; Computer Science or Math background preferred8+ years in the technology field, with 4-6+ years working in the identity and access management domain3+ years of experience with CyberArk and Privileged Cloud technologies including hands-on experience with account and safe management, CyberArk administration and configuration, management and troubleshooting of the various CyberArk Privileged Cloud components.Hands-on experience with DevOps and Agile methodologies, including implementation and administration of CyberArk’s secret management technologies such as Credential Provider, Secrets Hub and Conjur (Cloud or Enterprise).Here’s What You’ll Bring to the Table (Preferred Qualifications)Experience with Privileged Access Management principles, best practices, and technologiesFamiliarity with JIT, Least privileged and dynamic privilege conceptsStrong understanding of virtualization and cloud platforms with knowledge of AWS infrastructure and architecture. Familiarity with other cloud platforms, such as Azure, or GCP a plus.Knowledge of both Windows and Unix platforms, with programming (PowerShell, etc.) a plus.Understanding of DevOps pipeline and CI\CD toolsKnowledge and understanding of APIs, specifically RESTful APIs, and familiarity with service-oriented architecture and web services integration. Self-starter with ability to work in a team environment, with demonstrated ability to manage multiple competing tasks simultaneously and complete work within allocated timeframesStrong knowledge of Information Security frameworks and security architecture frameworks.Strong analytical and problem-solving skillsAbility to work independently and as part of a teamRelevant certifications such as CISSP, CISM, or CISA are a plusCyberArk certification a plusExperience with GxP environments and regulatory requirementsUnderstanding of security risks and implementation of mitigating controls, and ability to convey risk to all levels of the business, from management to operations and development teamsExcellent communication and interpersonal skills, including writing and presentation skillsEmbrace a culture of continuous service improvement and service excellenceA desire to make an impact as part of a high-growth, transformational company that is Bold, Relentless, Curious, and Collaborative.Under Washington State law, Moderna is required to provide a reasonable estimate of the salary range for the jobs covered by this description.  Base compensation for these positions in Washington State range from $144,000.00 to $230,500.00. Actual salary determinations will take into account factors such as work location, prior education and experience, job-related knowledge, and demonstrated skills.  Compensation decisions are made on the facts and circumstances of each case.In addition to base compensation Moderna employees are eligible for a comprehensive incentive compensation package including an annual cash bonus, new hire equity and an annual refresh, 401(k) match, competitive and inclusive medical, dental, and vision coverage options, flexible spending accounts for medical and dependent care, Life, LTD, and STD insurance, paid family leave offerings, including at least 18 weeks of 100% paid parental leave, lifestyle spending account, adoption, surrogacy, and family-planning benefits, generous paid time off, including:•    Vacation, sick time, and observed Company-wide holidays•    Paid volunteer time to participate within your community•    Discretionary winter holiday shut down•    Paid 4-week sabbatical after 5 years, and every 3 years afterModerna is pleased to provide you and your family with a comprehensive and innovative suite of benefits, including:Highly competitive and inclusive medical, dental and vision coverage optionsFlexible Spending Accounts for medical expenses and dependent care expensesLifestyle Spending Account funds to help you engage in personal enrichment and self-care activitiesFamily care benefits, including subsidized back-up care options and on-demand tutoringFree premium access to fitness, nutrition, and mindfulness classes Exclusive preferred pricing on Peloton fitness equipmentAdoption and family-planning benefitsDedicated care coordination support for our LGBTQ+ communityGenerous paid time off, including:•    Vacation, sick time and holidays•    Volunteer time to participate within your community•    Discretionary year-end shutdown•    Paid sabbatical after 5 years; every 3 years thereafterGenerous Paid Leave offerings, including 18 weeks of 100% paid parental leave for all new parents 401k match and Financial Planning toolsModerna-paid Life, LTD and STD insurance coverages, as well as voluntary benefit optionsComplimentary concierge service including home services research, travel booking, and entertainment requestsFree parking or subsidized commuter passesLocation-specific perks and extras! About ModernaSince our founding in 2010, we have aspired to build the leading mRNA technology platform, the infrastructure to reimagine how medicines are created and delivered, and a world-class team. We believe in giving our people a platform to change medicine and an opportunity to change the world. By living our mission, values, and mindsets every day, our people are the driving force behind our scientific progress and our culture. Together, we are creating a culture of belonging and building an organization that cares deeply for our patients, our employees, the environment, and our communities.We are proud to have been recognized as a Science Magazine Top Biopharma Employer, a Fast Company Best Workplace for Innovators, and a Great Place to Work in the U.S.As we build our company, we have always believed an in-person culture is critical to our success. Moderna champions the significant benefits of in-office collaboration by embracing a 70/30 work model. This 70% in-office structure helps to foster a culture rich in innovation, teamwork, and direct mentorship. Join us in shaping a world where every interaction is an opportunity to learn, contribute and make a meaningful impact.If you want to make a difference and join a team that is changing the future of medicine, we invite you to visit modernatx.com/careers to learn more about our current opportunities.Moderna is a smoke-free, alcohol-free and drug-free work environment.Moderna is a place where everyone can grow. If you meet the Basic Qualifications for the role and you would be excited to contribute to our mission every day, please apply!Moderna is proud to be an equal opportunity workplace and is an affirmative action employer.Moderna is committed to equal employment opportunity and non-discrimination for all employees and qualified applicants without regard to a person's race, color, sex, gender identity or expression, age, religion, national origin, ancestry or citizenship, ethnicity, disability, military or protected veteran status, genetic information, sexual orientation, marital or familial status, or any other personal characteristic protected under applicable law. Moderna is an E-Verify Employer in the United States. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements.Belonging, Inclusion, and Diversity are critical to the success of our company and our impact on society. We’re focused on attracting, retaining, developing, and advancing our employees and believe that by cultivating diverse experiences, backgrounds, and ideas, we can provide an environment where every employee is able to contribute their best.Moderna is committed to offering reasonable accommodations to qualified job applicants with disabilities. Any applicant requiring an accommodation in connection with the hiring process and/or to perform the essential functions of the position for which the applicant has applied should contact the Accommodations team at [email protected].  (EEO/AAP Employer) -SummaryLocation: Cambridge, Massachusetts; USA-Washington-Seattle-1099 Stewart Street; DigitalType: Full time