Architect, Privileged Access Management

About This Role

This architecture role designs the enterprise Privileged Access Management (PAM) across all regions, shaping and refining the technical architecture based on global PAM strategy. The Architect translates this into adoptable reference designs for privileged human and non-human identities, working independently and integrating with various IT teams.

Responsibilities

• Architect enterprise PAM target-state, including privileged account discovery, vaulted credential management, session isolation/recording, JIT access, break-glass, endpoint privilege management, and machine/service-account controls
• Integrate PAM architecture with IdP, IGA, SIEM, ITSM, CMDB, cloud platforms, and DevOps pipelines
• Engineer/prototype reference implementations and policy-as-code patterns to prove designs before regional teams scale them
• Design the sustainability and governance model, including control design, exception governance, ownership, and architecture review cadence

Requirements

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related field
• 9+ years of cybersecurity experience with a focus on identity and access or privileged access management (GCRF P4 Bachelor's-track minimum; recommended, pending Comp sign-off)
• Experience designing privileged access management architecture, including discovery, vaulting, session management, just-in-time access, endpoint privilege management, and machine/service-account controls
• Hands-on experience with enterprise PAM platforms (such as CyberArk, BeyondTrust, or Delinea) and integrating them with identity, cloud, ITSM, and SIEM systems
• Experience working independently with IAM, infrastructure, cloud, and DevOps teams to design and govern privileged-access controls and exceptions

Nice to have:

• Experience with non-human identity / secrets management and policy-as-code
• CISSP, CCSP, CISM, or a relevant PAM platform certification

Important Details

• Reports to: Director, Identity Security & Privileged Access Management
• Team: enterprise-wide Danaher Information Security (DIS) team

About the Company

Danaher partners with customers across the globe to help them solve their most complex challenges, architecting solutions that bring the power of science to life.