Director, Identity, Device Trust and Zero Trust

Ready to join a team that's all in? At Imprivata, we deliver unified access and security management programs that eliminate friction, empowering healthcare and mission-critical organizations to work smarter, faster, and more securely.

We believe work can be more than a job or task-it's a collective spirit; the type that emboldens creativity, embraces challenge, and fosters excitement. We are constantly raising the bar on what's possible, owning the outcome of our triumphs and trials, staying nimble amidst change, and cultivating an environment where we win together. Here, your ideas matter, your differences are celebrated, and your work drives real results for your career, your teammates, and our customers.

When you join Imprivata, you embark on a shared journey of ambition and growth. We're committed to building an inclusive workplace where everyone feels valued and supported. If you're looking for a place to match your passion with purpose-and where every day you can make an impact-you'll find it here.

We are seeking a Director, Identity, Device Trust and Zero Trust to join our team. This is a Hybrid opportunity based out of our Waltham, MA OR Austin, TX office.

The Director of Zero Trust, Device Trust & Identity is a senior security leader responsible for defining, driving, and operationalizing the company's Zero Trust architecture with a primary focus on identity, device trust, and continuous verification. This role owns the strategy and standards that move the organization to least-privilege access, and strong device posture enforcement.

• Own the Zero Trust roadmap for identity, device trust, and access, aligned with the CISO's enterprise security strategy.
• Define target architecture for continuous authentication, authorization, device posture verification, just-in-time provisioning, short-lived credentials, and context-aware access.
• Establish standards for identity lifecycle management, privileged access, service accounts, machine identities, and workload identities.
• Partner with Product, Engineering, and IT to scale identity controls across the company's products, assets, and environments.

• Define device trust requirements, including managed versus BYOD, compliance checks, and continuous health assessment.
• Govern MDM and endpoint-management security requirements.
• Establish standards and reference architectures for Tailscale and comparable zero-trust network access solutions.
• Ensure identity and device signals drive access decisions across cloud, SaaS, internal, and customer-facing environments.

• Own the company-wide DSPM strategy across product environments and corporate IT, including requirements, platform evaluation, vendor selection, implementation,and operations.
• Establish governance, data classification integration, continuous monitoring, remediation workflows, metrics, and sustainable operating processes.
• Partner with Product, Engineering, and IT to use DSPM insights for access decisions, risk prioritization, and Zero Trust controls.

• Serve as the primary security advisor for enterprise content management, collaboration platforms, repositories, and information lifecycle management.
• Define security requirements, architecture guidance, and risk assessments covering identity, access, device trust, data protection, retention, and compliance.
• Collaborate with IT, Product, Privacy and business stakeholders to balance usability, compliance, and security.

• Establish ownership, decision rights, escalation paths, service levels, RACI matrices, intake processes, and change-management workflows for identity, device management, access technologies, DSPM, and related controls.

• Translate Zero Trust and data-security principles into enforceable policies, standards, and control frameworks.
• Support audits, customer security reviews, questionnaires, and compliance requirements involving identity, devices, and data.
• Maintain risk registers and treatment plans with clear ownership and accountability.

• Build and lead a team or matrixed resources focused on identity, device trust, Zero Trust architecture and engineering, and DSPM.
• Influence Product and Engineering leadership to embed secure identity, access, and data-security patterns into platforms and products.
• Serve as an internal thought leader on modern…