Senior Privileged Access Management Engineer (Cyber Security Engineer)

The Role Joining Moderna means advancing mRNA science to transform medicine. Work with exceptional global teams on a broad pipeline and build a career that makes a real difference for patients. Moderna is strengthening its international business services hub in Warsaw, supporting our growing global operations. This is an opportunity to play a pivotal role in advancing and maturing Moderna’s Privileged Access Management (PAM) capabilities within a rapidly evolving technology and cybersecurity landscape. As a technical subject matter expert, you will drive the design, administration, integration, and continuous improvement of CyberArk-based privileged access solutions across both cloud and on‑premises environments. Responsibilities Serve as the engineering subject matter expert for Moderna’s Privileged Access Management program, owning the CyberArk platform and its associated components. Manage the configuration, administration, maintenance, and ongoing optimization of the CyberArk environment. Collaborate with business units, application owners, and engineering teams to understand requirements and translate business needs into secure and scalable PAM solutions and technical designs. Conduct stakeholder interviews and gather application, service, and infrastructure information to support CyberArk onboarding activities. Define and articulate business and functional requirements based on evolving industry best practices, emerging technologies, and organizational needs. Partner with DevOps, systems, network, cybersecurity, and infrastructure teams to ensure privileged access management standards are consistently implemented and maintained. Perform application integration assessments and provide technical guidance on CyberArk integration approaches and options. Lead and manage the onboarding of privileged accounts into CyberArk, ensuring adherence to established design frameworks and operational standards. Develop and maintain end‑user documentation, knowledge articles, standards, and training materials to support adoption and operational excellence. Create detailed architecture documentation, implementation plans, technical standards, and solution designs. Evaluate the existing PAM environment to identify technical, operational, and security enhancement opportunities, driving continuous improvement initiatives. Participate in disaster recovery planning, capacity management, performance monitoring, maintenance activities, and platform resilience efforts to ensure high availability. Work closely with Cybersecurity and Governance teams to ensure PAM solutions align with corporate security policies, regulatory requirements, and established standards. Regularly review, evaluate, and enhance PAM policies, procedures, and controls to maintain strong security compliance and operational effectiveness. Develop, support, and maintain security policies, standards, and operational processes related to privileged access management. Stay current on industry trends, threat landscapes, emerging technologies, and evolving identity security practices to help ensure Moderna’s IAM and PAM strategies remain effective and future ready. Contribute to the overall cybersecurity posture of the organization through adherence to security policies, procedures, and best practices. Support emergency incidents and planned maintenance activities, including participation in 24x7 support requirements when necessary. Minimum Qualifications BS level technical degree or equivalent experience required; Computer Science or Math background preferred. 8+ years in the technology field, with 4-6+ years working in the identity and access management domain. 3+ years of experience with CyberArk and Privileged Cloud technologies, including hands‑on experience with account and safe management, CyberArk administration and configuration, and troubleshooting of the various CyberArk Privileged Cloud components. Hands‑on experience with DevOps and Agile methodologies, including implementation and administration of CyberArk’s secret management technologies such as Credential Provider, Secrets Hub and Conjur (Cloud or Enterprise). Proficiency in English (verbal and/or written) required due to global collaboration needs. Preferred Qualifications Experience with Privileged Access Management principles, best practices, and technologies. Familiarity with JIT, least privileged and dynamic privilege concepts. Strong understanding of virtualization and cloud platforms with knowledge of AWS infrastructure and architecture. Familiarity with other cloud platforms, such as Azure or GCP, a plus. Knowledge of both Windows and Unix platforms, with programming (PowerShell, etc.) a plus. Understanding of DevOps pipeline and CI/CD tools. Knowledge and understanding of APIs, specifically RESTful APIs, and familiarity with service‑oriented architecture and web services integration. Self‑starter with ability to work in a team environment, with demonstrated ability to manage multiple competing tasks simultaneously and complete work within allocated timeframes. Strong knowledge of Information Security frameworks and security architecture frameworks. Strong analytical and problem‑solving skills. Ability to work independently and as part of a team. Relevant certifications such as CISSP, CISM, or CISA are a plus. CyberArk certification a plus. Experience with GxP environments and regulatory requirements. Understanding of security risks and implementation of mitigating controls, and ability to convey risk to all levels of the business, from management to operations and development teams. Excellent communication and interpersonal skills, including writing and presentation skills. Embrace a culture of continuous service improvement and service excellence. A desire to make an impact as part of a high‑growth, transformational company that is bold, relentless, curious, and collaborative. Pay & Benefits The salary range for this role is $145,900.00 – $234,200.00 (positions that may be performed in California have a range of $167,400.00 – $192,600.00). Salary is based on competencies, education, qualifications, and performance. Eligible employees may receive an annual discretionary bonus, other incentive compensation, or equity award. Benefits include best‑in‑class healthcare coverage and voluntary benefit programs, a holistic approach to well‑being with access to fitness, mindfulness, and mental health support, family planning benefits (fertility, adoption, surrogacy), generous paid time off, vacation, volunteer days, sabbatical, global recharge days, and a discretionary year‑end shutdown. Savings and investment opportunities help plan for the future, and location‑specific perks and extras are available. Equal Employment Opportunity Moderna is committed to equal employment opportunity and non‑discrimination for all employees and qualified applicants without regard to race, color, sex, gender identity or expression, age, religion, national origin, ancestry or citizenship, ethnicity, disability, military or protected veteran status, genetic information, sexual orientation, marital or familial status, or any other characteristic protected under applicable law. Accommodations We are committed to offering reasonable accommodations to qualified applicants with disabilities. Any applicant requiring an accommodation should contact the Accommodations team at View email address on click.appcast.io. Export Control Notice This position may involve access to technology or data subject to U.S. export control laws. Employment is contingent upon the applicant’s ability to access export‑controlled information in accordance with U.S. law. Only individuals who qualify as U.S. persons (citizens, permanent residents, asylees, or refugees) are eligible for this position. Moderna is unable to sponsor non‑U.S. persons for an export‑control license. #J-18808-Ljbffr Moderna Therapeutics