Associate Director, Cybersecurity Engineering

Job Description

Role Summary

The Privileged Access Management (PAM) Team Lead owns the strategy, engineering execution, service health, and continuous improvement of our company's privileged access and secrets management capabilities. The role leads a global PAM engineering team and partners with the IAM Product team, architecture, cybersecurity, and business stakeholders to advance Zero Trust and meet business, regulatory, and operational needs. This role combines people leadership, engineering delivery, technical strategy, and governance to reduce cyber risk and strengthen enterprise identity security.

Key Responsibilities:

• Own and execute the enterprise PAM roadmap aligned with our company's cybersecurity strategy, Zero Trust objectives, and identity security initiatives.
• Define and maintain PAM standards and governance practices in partnership with security, risk, and architecture teams.
• Develop and present PAM posture, risk metrics, and remediation plans to leadership, governance, and audit stakeholders.
• Partner across teams to prioritize PAM adoption, expand privileged access controls and remediate risk.

• Lead the design and delivery of enterprise PAM and secrets management capabilities.
• Modernize privileged access through risk-based, least-privilege, and just-in-time access models.
• Translate PAM strategy into scalable designs, standards, and patterns across all environments.
• Lead evaluations of new PAM technologies based on need, risk, architectural fit, and cost.
• Oversee remediation of PAM vulnerabilities, control gaps, audit findings, and technical debt.

• Lead daily PAM engineering activities, drive execution, remove delivery barriers, and develop team capabilities.
• Promote Agile ways of working and continuous improvement.
• Mentor and influence the team’s personal and professional development.

• Partner with the IAM Product Owner to manage the backlog aligned with OKRs and team capacity.
• Be accountable for the health, stability, and continuous improvement of PAM services.
• Partner with stakeholders to ensure capabilities meet business and security needs while reducing risk.

Education Requirement:

• Bachelor’s degree (or equivalent experience), preferably in Computer Science, Information Systems, or a related field.

Required Skills & Experience
:

• 10+ years of experience in cybersecurity or Identity and Access Management (IAM), including at least 7 years focused on Privileged Access Management (PAM).
• Experience leading and developing security engineering teams within a large, global organization.
• Strong understanding of enterprise PAM and secrets management platforms (e.g., Delinea, Cyber Ark, Beyond Trust, and/or Hashi Corp Vault).
• Hands‑on knowledge of PAM solutions supporting Windows, UNIX/Linux, and databases.
• Experience delivering solutions using Agile methodologies and collaborating with Product Owners using tools such as Jira.
• Excellent communication skills, with the ability to effectively translate complex technical concepts, risks, and recommendations for technical and non-technical stakeholders.

Preferred Experience & Skills
:

• Hands‑on experience with identity platforms such as Active Directory, Microsoft Entra , cloud identity services, and/or Hashi Corp Vault.
• Hands‑on knowledge of PAM solutions operating in multi-cloud environments (AWS, Azure, and GCP) and Kubernetes platforms.
• Familiarity with Service Now for incident and change management processes.
• Experience automating administrative and operational tasks using Power Shell or similar technologies.
• Strong understanding of cybersecurity fundamentals, secure SDLC practices, Zero Trust…