Cybersecurity Privileged Access Engineer

Identity And Access Management (IAM) Senior Engineer For Privileged Access Management (PAM)

BD is one of the largest global medical technology companies in the world. Advancing the world of health™ is our Purpose, and it's no small feat. It takes the imagination and passion of all of us—from design and engineering to the manufacturing and marketing of our billions of MedTech products per year—to look at the impossible and find transformative solutions that turn dreams into possibilities.

As an Identity and Access Management (IAM) Senior Engineer for Privileged Access Management (PAM), you will be an integral part of our cybersecurity team, focusing on designing, implementing and maintaining PAM solutions that control and monitor access to critical systems and applications with elevated privileges, ensuring only authorized users can access sensitive data and perform privileged actions.

You will be a key stakeholder that involves discovery, onboarding & offboarding of privileged accounts, defining, building, testing, and deploying policies & templates, managing password rotations, configuring logging and monitoring, developing scripts, identifying automation opportunities, and collaborating with IT and security teams to mitigate security risks related to privileged access.

Support IAM architects' designs, assist PAM Operations team in coordinating PAM solutions with company systems. This role demands an understanding of IAM principles, protocols, and standard methodologies. You will drive the strategy of security and controls for specific Privileged Access products, processes and solutions.

You will work in a dynamic and complex environment to protect BD from cybersecurity threats and ensure the security and integrity of our products and services. This IN-OFFICE role can be in either BD Location: USA NC - Durham, OR NJ - Franklin Lakes

Main responsibilities will include:

• Collaborates with IAM Architects and Operations staff to implement and support comprehensive PAM technical solutions
• Collaborates with collaborators across the organization to identify and vault privileged accounts across all enterprise platforms
• Implements and supports advanced PAM capabilities such as password autorotation, session monitoring and recording, just in time access, etc.
• Facilitates PAM support by crafting docs, SOPs, training Ops team, mentoring junior IAM members
• Proactively researches relevant technologies, solutions, and system new features
• Shares findings and recommendations with architects, leaders, and multi-functional teams and helps drive implementation
• Ensures IAM solutions adhere to regulatory, compliance, and internal requirements
• Assist in the maintenance of IAM policies, standards, and procedures
• Assist Compliance in completing audit tasks and remediation efforts
• Ensures IAM security is aligned with BD overall security and contribute to the continuous improvement of our IAM security strategy based on risk prioritization and business objectives

About you

• Bachelor's degree in computer science, Information Technology, Cybersecurity, or at least five years' experience in a related field.
• Minimum of 8 years of experience in cybersecurity, with a focus on Identity and Access Management specifically in Privileged Access Management (PAM).
• In depth hands on experience with implementing PAM solutions, strengthening controls and demonstrating effectiveness.
• Strong understanding of infrastructure such as AD, Entra, PIM, AWS, GCP, Unix
• Working knowledge of common IAM solutions such as IGA, Authentication, MFA.
• Familiarity with regulatory standards such as SOX, HIPAA, GDPR, and ISO.

Preferred Skills:

• Certifications like CISSP, CISA, CISM, CCNA/CCNP, CEH or CompTIA CYSA+.
• Active Directory Security certification
• MS Entra Security certification
• AWS Security certification
• Experience with organizational standards and policies (ISO, NIST)