Director, Identity, Device Trust and Zero Trust

DescriptionReady to join a team that’s all in? At Imprivata, we deliver unified access and security management programs that eliminate friction, empowering healthcare and mission-critical organizations to work smarter, faster, and more securely.We believe work can be more than a job or task—it’s a collective spirit; the type that emboldens creativity, embraces challenge, and fosters excitement. We are constantly raising the bar on what’s possible, owning the outcome of our triumphs and trials, staying nimble amidst change, and cultivating an environment where we win together. Here, your ideas matter, your differences are celebrated, and your work drives real results—for your career, your teammates, and our customers.When you join Imprivata, you embark on a shared journey of ambition and growth. We’re committed to building an inclusive workplace where everyone feels valued and supported. If you’re looking for a place to match your passion with purpose—and where every day you can make an impact—you’ll find it here.We are seeking a Director, Identity, Device Trust and Zero Trust to join our team. This is a Hybrid opportunity based out of our Waltham, MA OR Austin, TX office. Job SummaryThe Director of Zero Trust, Device Trust & Identity is a senior security leader responsible for defining, driving, and operationalizing the company’s Zero Trust architecture with a primary focus on identity, device trust, and continuous verification. This role owns the strategy and standards that move the organization to least-privilege access, and strong device posture enforcement.Duties and ResponsibilitiesZero Trust Strategy & ArchitectureOwn the Zero Trust roadmap for identity, device trust, and access, aligned with the CISO’s enterprise security strategy.Define target architecture for continuous authentication, authorization, device posture verification, just-in-time provisioning, short-lived credentials, and context-aware access.Establish standards for identity lifecycle management, privileged access, service accounts, machine identities, and workload identities.Partner with Product, Engineering, and IT to scale identity controls across the company’s products, assets, and environments.Device Trust & Modern AccessDefine device trust requirements, including managed versus BYOD, compliance checks, and continuous health assessment.Govern MDM and endpoint-management security requirements.Establish standards and reference architectures for Tailscale and comparable zero-trust network access solutions.Ensure identity and device signals drive access decisions across cloud, SaaS, internal, and customer-facing environments.Data Security Posture ManagementOwn the company-wide DSPM strategy across product environments and corporate IT, including requirements, platform evaluation, vendor selection, implementation,and operations.Establish governance, data classification integration, continuous monitoring, remediation workflows, metrics, and sustainable operating processes.Partner with Product, Engineering, and IT to use DSPM insights for access decisions, risk prioritization, and Zero Trust controls.Enterprise Content Management SecurityServe as the primary security advisor for enterprise content management, collaboration platforms, repositories, and information lifecycle management.Define security requirements, architecture guidance, and risk assessments covering identity, access, device trust, data protection, retention, and compliance.Collaborate with IT, Product, Privacy and business stakeholders to balance usability, compliance, and security.Operating Model: Security, IT, Product & EngineeringEstablish ownership, decision rights, escalation paths, service levels, RACI matrices, intake processes, and change-management workflows for identity, device management, access technologies, DSPM, and related controls.Governance, Risk & ComplianceTranslate Zero Trust and data-security principles into enforceable policies, standards, and control frameworks.Support audits, customer security reviews, questionnaires, and compliance requirements involving identity, devices, and data.Maintain risk registers and treatment plans with clear ownership and accountability.Leadership & InfluenceBuild and lead a team or matrixed resources focused on identity, device trust, Zero Trust architecture and engineering, and DSPM.Influence Product and Engineering leadership to embed secure identity, access, and data-security patterns into platforms and products.Serve as an internal thought leader on modern identity, device trust, and data-security practices.Other duties as assigned and requiredQualifications10+ years of information-security experience, including significant expertise in IAM, Zero Trust, endpoint security, data security, or related fields.Proven experience designing and implementing modern identity or Zero Trust architectures at scale.Experience leading DSPM or equivalent data-security strategy, selection, implementation, and operations across product and corporate environments.Strong knowledge of JIT provisioning, PAM, MDM and device posture, conditional access, Tailscale or similar network-access technologies, and ECM security.Demonstrated success creating operating models across Security, IT, Product, and Engineering.Ability to establish technical standards, influence without authority, and drive cross-functional execution.Excellent communication skills, with the ability to translate technical concepts into policies, product requirements, and executive-level narratives.Preferred QualificationsExperience in an identity, cybersecurity, or SaaS company.Hands-on or architectural experience with identity providers, MDM, conditional access, zero-trust network access, DSPM, and ECM platforms.CISSP, CISM, or relevant identity, Zero Trust, or data-security certifications.People leadership or large-scale program leadership experience across security and technical organizations.This position offers a total compensation range of $250,000.00 to $290,000.00 (inclusive of base salary and variable compensation, such as bonuses and incentives). In addition, more information about Imprivata’s benefit offerings can be found here. This range represents the high and low end of Imprivata’s compensation range for this position. Actual compensation will vary and may be above or below the range based on various factors, such as a candidate’s location, skills, experience, and qualifications. At Imprivata, we have a top-notch work environment, developmental opportunities, a competitive total rewards package, and the desire to have fun. If you have the skills and qualifications as we have described above, we want to hear from you! Imprivata provides equal employment opportunities, regardless of race, religion, age, sex, national origin, disability status, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. #LI-Hybrid #LI-SF1