Cybersecurity Privileged Access Engineer

Job Description

As an Identity and Access Management (IAM) Senior Engineer for Privileged Access Management (PAM), you will be an integral part of our cybersecurity team, focusing on designing, implementing and maintaining PAM solutions that control and monitor access to critical systems and applications with elevated privileges, ensuring only authorized users can access sensitive data and perform privileged actions.

You will be a key stakeholder that involves discovery, onboarding & offboarding of privileged accounts, defining, building, testing, and deploying policies & templates, managing password rotations, configuring logging and monitoring, developing scripts, identifying automation opportunities, and collaborating with IT and security teams to mitigate security risks related to privileged access.

Support IAM architects' designs, assist PAM Operations team in coordinating PAM solutions with company systems. This role demands an understanding of IAM principles, protocols, and standard methodologies. You will drive the strategy of security and controls for specific Privileged Access products, processes and solutions.

You will work in a dynamic and complex environment to protect BD from cybersecurity threats and ensure the security and integrity of our products and services. This IN-OFFICE role can be in either BD

Location:

USA NC - Durham, OR NJ - Franklin Lakes

• Collaborates with IAM Architects and Operations staff to implement and support comprehensive PAM technical solutions
• Collaborates with collaborators across the organization to identify and vault privileged accounts across all enterprise platforms
• Implements and supports advanced PAM capabilities such as password autorotation, session monitoring and recording, just in time access, etc.
• Facilitates PAM support by crafting docs, SOPs, training Ops team, mentoring junior IAM members
• Proactively researches relevant technologies, solutions, and system new features
• Shares findings and recommendations with architects, leaders, and multi-functional teams and helps drive implementation
• Ensures IAM solutions adhere to regulatory, compliance, and internal requirements
• Assists in the maintenance of IAM policies, standards, and procedures
• Assists Compliance in completing audit tasks and remediation efforts
• Ensures IAM security is aligned with BD overall security and contributes to the continuous improvement of our IAM security strategy based on risk prioritization and business objectives

• Bachelor’s degree in computer science, Information Technology, Cybersecurity, or at least five years’ experience in a related field.
• Minimum of 8 years of experience in cybersecurity, with a focus on Identity and Access Management specifically in Privileged Access Management (PAM).
• In depth hands on experience with implementing PAM solutions, strengthening controls and demonstrating effectiveness.
• Strong understanding of infrastructure such as AD, Entra, PIM, AWS, GCP, Unix
• Working knowledge of common IAM solutions such as IGA, Authentication, MFA.
• Familiarity with regulatory standards such as SOX, HIPAA, GDPR, and ISO.

• Certifications like CISSP, CISA, CISM, CCNA/CCNP, CEH or CompTIA CYSA+.
• Active Directory Security certification
• MS Entra Security certification
• AWS Security certification
• Experience with organizational standards and policies (ISO, NIST)

Cybersecurity, Identity Access Management (IAM), Information Technology (IT)

General Data Protection Regulation (GDPR)

For certain roles at BD, employment is contingent upon the Company’s receipt of sufficient proof that you are fully vaccinated against COVID-19. In some locations, testing for COVID-19 may be available and/or required.

USA NC - Durham - Davis Drive

USA NJ - Franklin Lakes

$99,700.00 - $ USD Annual

Becton, Dickinson, and Company is an Equal Opportunity Employer. We evaluate applicants without regard to race, color, religion, age, sex, creed, national origin, ancestry, citizenship status, marital or domestic or civil union status, familial status, affectional or sexual orientation, gender identity or expression, genetics, disability, military eligibility or veteran status, and other legally protected characteristics.