Director, Identity, Device Trust and Zero Trust

Description Ready to join a team that’s all in? At Imprivata, we deliver unified access and security management programs that eliminate friction, empowering healthcare and mission-critical organizations to work smarter, faster, and more securely.

We believe work can be more than a job or task—it’s a collective spirit; the type that emboldens creativity, embraces challenge, and fosters excitement. We are constantly raising the bar on what’s possible, owning the outcome of our triumphs and trials, staying nimble amidst change, and cultivating an environment where we win together. Here, your ideas matter, your differences are celebrated, and your work drives real results—for your career, your teammates, and our customers.

When you join Imprivata, you embark on a shared journey of ambition and growth. We’re committed to building an inclusive workplace where everyone feels valued and supported. If you’re looking for a place to match your passion with purpose—and where every day you can make an impact—you’ll find it here.

We are seeking a Director, Identity, Device Trust and Zero Trust to join our team. This is a Hybrid opportunity based out of our Waltham, MA OR Austin, TX office.

Job Summary The Director of Zero Trust, Device Trust & Identity is a senior security leader responsible for defining, driving, and operationalizing the company’s Zero Trust architecture with a primary focus on identity, device trust, and continuous verification. This role owns the strategy and standards that move the organization to least-privilege access, and strong device posture enforcement.

Duties and Responsibilities Zero Trust Strategy & Architecture Own the Zero Trust roadmap for identity, device trust, and access, aligned with the CISO’s enterprise security strategy.

Define target architecture for continuous authentication, authorization, device posture verification, just-in-time provisioning, short-lived credentials, and context-aware access.

Establish standards for identity lifecycle management, privileged access, service accounts, machine identities, and workload identities.

Partner with Product, Engineering, and IT to scale identity controls across the company’s products, assets, and environments.

Device Trust & Modern Access Define device trust requirements, including managed versus BYOD, compliance checks, and continuous health assessment.

Govern MDM and endpoint-management security requirements.

Establish standards and reference architectures for Tailscale and comparable zero-trust network access solutions.

Ensure identity and device signals drive access decisions across cloud, SaaS, internal, and customer-facing environments.

Data Security Posture Management Own the company-wide DSPM strategy across product environments and corporate IT, including requirements, platform evaluation, vendor selection, implementation,and operations.

Establish governance, data classification integration, continuous monitoring, remediation workflows, metrics, and sustainable operating processes.

Partner with Product, Engineering, and IT to use DSPM insights for access decisions, risk prioritization, and Zero Trust controls.

Enterprise Content Management Security Serve as the primary security advisor for enterprise content management, collaboration platforms, repositories, and information lifecycle management.

Define security requirements, architecture guidance, and risk assessments covering identity, access, device trust, data protection, retention, and compliance.

Collaborate with IT, Product, Privacy and business stakeholders to balance usability, compliance, and security.

Operating Model:
Security, IT, Product & Engineering Establish ownership, decision rights, escalation paths, service levels, RACI matrices, intake processes,…