Serve as the technical SME for Privileged Access Management (PAM), responsible for the design, implementation, administration, support, and continuous improvement of enterprise PAM capabilities.
Responsibilities
Serve as the technical SME for Privileged Access Management (PAM), responsible for the design, implementation, administration, support, and continuous improvement of enterprise PAM capabilities.
Manage and maintain PAM platforms, including privileged account onboarding, password vaulting, automated credential rotation, privileged session management, and Just-In-Time (JIT) access controls.
Provide day-to-day operational support, troubleshooting, monitoring, upgrades, patching, and performance management of PAM infrastructure and services.
Develop and maintain automation, custom integrations, APIs, workflows, scripts, and reporting solutions to improve PAM operational efficiency and user experience.
Integrate PAM solutions with Active Directory, Microsoft Entra ID, cloud platforms, operating systems, databases, enterprise applications, ITSM, SIEM, and security tools.
Implement, operate, and continuously improve security across enterprise-scale cloud and on-premises infrastructure, covering Azure, GCP, and data center environments.
Responsibilities
Implement and maintain security controls across Azure, GCP and on premises infrastructure in line with enterprise security standards and approved architecture.
Assess security posture, identify misconfigurations and drive remediation of vulnerabilities and control gaps with platform owners.
Apply secure configuration baselines and system hardening across servers, virtualization, networks, storage and backup platforms.
Implement identity and access controls, including least privilege, role-based access, privileged access management and periodic access reviews across cloud IAM, Microsoft Entra ID and Active Directory.
Configure and maintain endpoint and workload protection, security logging and monitoring integrations with central security operations.
Design, implement, and improve security controls that protect the organization’s systems, cloud environments, networks, applications, AI-enabled services, and data.
Compensation
the base salary range for this position is $130,000 to $170,000, excluding fringe benefits or potential bonuses
Responsibilities
Design, implement, maintain, and improve security controls across on-premises, cloud, network, endpoint, identity, application, and data environments
Engineer cloud and identity protections, including security posture management, identity governance, privileged access management, conditional access, Zero Trust controls, and Microsoft Entra ID or comparable platforms
Optimize security tools, configuration baselines, access controls, and automation; coordinate remediation when controls do not meet approved technical requirements
Lead vulnerability management, prioritize findings by risk and exposure, and coordinate remediation with system owners
Improve threat detection and monitoring through log-source onboarding, detection rules, alert tuning, investigation workflows, and security automation
Requirements
Bachelor’s degree in Cybersecurity, Information Security, Computer Science, Information Technology, Engineering, or a related field
Nice to have: CISSP
Nice to have: CISM
Nice to have: GIAC
Nice to have: GCIH
Skills
Technical Project Manager - Identity, Credential, and Access Management (ICAM)
Lead and manage complex IT projects across the full lifecycle within a federal government environment, ensuring delivery on-time, within budget, and aligned with client requirements.
Compensation
$112,000 - $179,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual’s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.
Responsibilities
Lead and manage the full project lifecycle of large-scale IT solutions, including planning, design, development, testing, and deployment.
Establish priorities, determine project resource needs, and acquire necessary assets.
Develop detailed project plans based on scope, budget, personnel, and resource availability.
Utilize Agile methodologies to drive effective planning, execution, and delivery.
Break down complex projects into manageable, sequenced tasks to improve turnaround and efficiency.
Lead the team that protects how every employee, contractor, partner, application, and machine across Donaldson’s global business gains and uses access, owning the strategy, operations, and continuous improvement of identity platforms like SailPoint Identity Security Cloud and Microsoft Entra ID.
Compensation
Annual Salary Range: $148,880 - $186,100.
Responsibilities
Lead, coach, and grow a high-performing team of IAM engineers and analysts
Own the IAM strategy and multi-year roadmap aligned with Donaldson’s cybersecurity program, Zero Trust architecture, business priorities, and regulatory and customer requirements
Lead the operation and evolution of SailPoint Identity Security Cloud for identity governance and administration
Lead Microsoft Entra ID and the broader Microsoft identity stack
Strengthen privileged access management, least privilege, and just-in-time access for administrators, service accounts, cloud environments, and operational technology in manufacturing plants
Requirements
Bachelor’s degree in cybersecurity, computer science, information systems, or a related field
Nice to have: IAM leadership within global manufacturing
Nice to have: Privileged access management platforms (CyberArk, BeyondTrust, Delinea)
Nice to have: Securing identities for cloud and SaaS platforms (Azure, AWS, Microsoft 365)
Nice to have: Identity threat detection and response (Microsoft Defender for Identity)
Lead the design, operation, and continuous improvement of the Bank’s Citrix NetScaler and Zscaler Private Access platforms, ensuring secure, reliable, and scalable remote connectivity for employees, contractors, and approved third parties within a regulated financial services environment.
Responsibilities
Architect, operate, and continuously improve the Citrix NetScaler ADC and NetScaler Gateway infrastructure
Manage and maintain SSL‑VPN and clientless access services, including virtual server configurations, authentication policies, rewrite rules, responder policies, and traffic steering mechanisms
Design, implement, and maintain secure authentication and conditional access policies based on user identity, device type, network location, and contextual risk factors
Participate in the design, implementation, and rollout of the Bank’s Zscaler Private Access (ZPA) platform
Develop and maintain expertise across both Citrix NetScaler Gateway and Zscaler Private Access technologies
Requirements
University degree or higher technical education in Computer Science, Information Security, or a related discipline
Own and prioritize the backlog, translating business and security needs into clear deliverables; define roadmap, service maturity, KPIs and improvement priorities; coordinate onboarding of applications and platforms into PAM; drive decisions and collaboration across cybersecurity, IAM, infrastructure, application teams, vendors, service management and the business.
Responsibilities
Own and prioritize the backlog
Define the roadmap, service maturity, KPIs and improvement priorities
Coordinate the onboarding of applications and platforms into PAM
Drive decisions and collaboration across cybersecurity, IAM, infrastructure, application teams, vendors, service management and the business
Support an effective approach to identifying and securing privileged access
The Sr. Manager, Network & Infrastructure Security is accountable for the security-by-design, operational resiliency, and lifecycle governance of Avangrid’s network security and enterprise infrastructure security platforms.
Locations (2)
Orange, Connecticut, United States
Boston, Massachusetts, United States
Compensation
Salary Range: $155,600 - $203,300: depending on experience and location
Responsibilities
Leads and integrates Network Security and Infrastructure Security capabilities, establishing a cohesive operating model, clear ownership, and measurable outcomes for protection of enterprise connectivity and IT platforms.
Defines the technology strategy, target-state architecture, and multi-year roadmaps for network security and enterprise infrastructure security services, aligned to Avangrid standards, business priorities, and the enterprise risk posture.
Establishes lifecycle management programs to ensure security technologies are correctly deployed, maintained, patched, and modernized; manages roadmaps aligned to enterprise strategy, technology evolution, and continuous transformation.
Administer Windows Server infrastructure across physical, virtual, and cloud environments
Support Microsoft Azure infrastructure and hybrid‑cloud services
Troubleshoot authentication, permissions, Group Policy, DNS, DHCP, certificates, and domain‑related issues
Support Microsoft 365 technologies, including Exchange Online and SharePoint
Requirements
Nice to have: Hyper‑V administration
Nice to have: Nutanix infrastructure
Nice to have: PKI / Certificate Authority administration
Provides leadership over current and future enterprise security technologies and services, including platforms such as Fortinet, Palo Alto, Check Point, Cisco, WAF and edge security platforms such as Akamai WAF, secure web gateway/proxy platforms such as Zscaler, privileged access platforms such as CyberArk, network detection and response platforms such as ExtraHop, or equivalent enterprise technologies.
Defines and governs engineering standards, reference architectures, and technology guardrails for network security controls (e.g., perimeter, segmentation, IDS/IPS, and cloud network security) and infrastructure security platforms (e.g., identity and access management, privileged access, endpoint security, vulnerability management, and security tooling operations).
Requirements
Bachelor’s degree in computer science, cybersecurity, information systems, engineering, or a related field
Senior Technical EngineerNewH & M Hennes & Mauritz AB (H&M Group) · Bangalore, India
Technical Project Manager - Identity, Credential, and Access Management (ICAM)NewPeraton · Remote