Danaher

Makes tools for drug research and medical testing

Architect – Privileged Access Management

Security Engineering & ArchitectureConfirmed live in the last 24 hours

Full-timeSão Paulo, State of São Paulo, BrazilNo salary listedRemote

About the Job

Requirements

A bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related field is required.
At least 9 years of cybersecurity experience focused on identity and access or privileged access management is required.
Experience designing privileged access management architecture, including discovery, vaulting, session management, just-in-time access, endpoint privilege management, and machine/service-account controls is required.
Hands-on experience with enterprise privileged access management platforms such as CyberArk, BeyondTrust, or Delinea, and integrating them with identity, cloud, IT service management, and security information and event management systems is required.
Experience working independently with identity and access management, infrastructure, cloud, and DevOps teams to design and govern privileged-access controls and exceptions is required.

Responsibilities

Architect the enterprise privileged access management target state, covering privileged account discovery, vaulted credential management, session isolation and recording, just-in-time access, break-glass access, endpoint privilege management, and machine/service-account controls.
Integrate privileged access management architecture with identity providers, identity governance and administration, security information and event management, IT service management, configuration management databases, cloud platforms, and DevOps pipelines.
Engineer and prototype reference implementations and policy-as-code patterns to validate designs before regional teams scale them.
Design the sustainability and governance model, including control design, exception governance, ownership, and architecture review cadence.

Desired Qualifications

Experience with non-human identity or secrets management and policy-as-code is a plus.
CISSP, CCSP, CISM, or a relevant privileged access management platform certification is a plus.

At Danaher, theArchitect, Privileged Access Managementdesigns the enterprise PAM architecture across all regions. Global PAM strategy and direction are set by security leadership andIT leadership; the Architect shapes and refines the technical architecture, then owns translating it into adoptable reference designs for privileged human and non-human identities. Thearchitect works independently and integrates with IAM, infrastructure, cloud, and DevOps teams that each own their own architecture and constraints.

This position reports to Director, Identity Security & Privileged Access Management and is part of theenterprise-wideDanaher Information Security (DIS)team;this is a remote associate role.

In this role, you will have the opportunity to:

Architect enterprise PAM target-state: privileged account discovery, vaulted credential management, session isolation/recording, JIT access, break-glass, endpoint privilege management, and machine/service-account controls.

Integrate PAM architecture with IdP, IGA, SIEM, ITSM, CMDB, cloud platforms, and DevOps pipelines.

Engineer/prototype reference implementations and policy-as-code patterns to prove designs before regional teams scale them.

Design the sustainability & governance model: control design, exception governance, ownership, and architecture review cadence.

The essential requirements of the job include:

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or related field.

9+ years of cybersecurity experience with a focus on identity and access or privileged access management (GCRF P4 Bachelor's-track minimum; recommended, pending Comp sign-off).

Experience designing privileged access management architecture — including discovery, vaulting, session management, just-in-time access, endpoint privilege management, and machine/service-account controls.

Hands-on experience with enterprise PAM platforms (such as CyberArk,BeyondTrust, orDelinea) and integrating them with identity, cloud, ITSM, and SIEM systems.

Experience working independently with IAM, infrastructure, cloud, and DevOps teams to design and governprivileged-accesscontrols and exceptions.

It would be a plus if you alsopossesspreviousexperience in:

Experience with non-human identity / secrets management and policy-as-code.

CISSP, CCSP, CISM, ora relevantPAM platform certification.

Join our winning team today. Together, we’ll accelerate the real-life impact of tomorrow’s science and technology. We partner with customers across the globe to help them solve their most complex challenges, architecting solutions that bring the power of science to life.

For more information, visit www.danaher.com.

About the Company

Danaher

Makes tools for drug research and medical testing

Danaher makes instruments, tests and laboratory supplies for drug developers, researchers and clinicians, spanning the path from biological research to clinical patient diagnosis. Its businesses include Cytiva for drug manufacturing, SCIEX for chemical analysis and Beckman Coulter for laboratory testing, linking specialized tools across healthcare workflows. Customers use its equipment to study cells, produce biological medicines and analyze patient samples; the group earns money by selling instruments, reagents, software and support services through its operating companies. Danaher was established in 1984 and is headquartered in Washington, DC.

Company size: 10,001+
Company stage: IPO
Headquarters: Washington, DC
Founded: 1984

Recently Posted Jobs

Explore more opportunities at Danaher

See more jobs