Senior Privileged Access Management Engineer (Cyber Security Engineer)

The Role

This is an opportunity to play a pivotal role in advancing and maturing Moderna's Privileged Access Management (PAM) capabilities within a rapidly evolving technology and cybersecurity landscape. As a technical subject matter expert, you will drive the design, administration, integration, and continuous improvement of CyberArk-based privileged access solutions across both cloud and on-premises environments.

Working within a highly collaborative and fast-paced environment, you will combine deep technical expertise, intellectual agility, and a security-first mindset to help ensure privileged access controls remain secure, scalable, reliable, and aligned with the needs of a growing global organization. You will partner closely with engineering, infrastructure, security, governance, and business stakeholders while helping shape the future of identity security at Moderna, including opportunities to leverage automation, digital innovation, and emerging AI-driven capabilities to enhance operational effectiveness and security outcomes.

Here's What You'll Do

• Serve as the engineering subject matter expert for Moderna's Privileged Access Management program, owning the CyberArk platform and its associated components.
• Manage the configuration, administration, maintenance, and ongoing optimization of the CyberArk environment.
• Collaborate with business units, application owners, and engineering teams to understand requirements and translate business needs into secure and scalable PAM solutions and technical designs.
• Conduct stakeholder interviews and gather application, service, and infrastructure information to support CyberArk onboarding activities.
• Define and articulate business and functional requirements based on evolving industry best practices, emerging technologies, and organizational needs.
• Partner with DevOps, systems, network, cybersecurity, and infrastructure teams to ensure privileged access management standards are consistently implemented and maintained.
• Perform application integration assessments and provide technical guidance on CyberArk integration approaches and options.
• Lead and manage the onboarding of privileged accounts into CyberArk, ensuring adherence to established design frameworks and operational standards.
• Develop and maintain end-user documentation, knowledge articles, standards, and training materials to support adoption and operational excellence.
• Create detailed architecture documentation, implementation plans, technical standards, and solution designs.
• Evaluate the existing PAM environment to identify technical, operational, and security enhancement opportunities, driving continuous improvement initiatives.
• Participate in disaster recovery planning, capacity management, performance monitoring, maintenance activities, and platform resilience efforts to ensure high availability.
• Work closely with Cybersecurity and Governance teams to ensure PAM solutions align with corporate security policies, regulatory requirements, and established standards.
• Regularly review, evaluate, and enhance PAM policies, procedures, and controls to maintain strong security compliance and operational effectiveness.
• Develop, support, and maintain security policies, standards, and operational processes related to privileged access management.
• Stay current on industry trends, threat landscapes, emerging technologies, and evolving identity security practices to help ensure Moderna's IAM and PAM strategies remain effective and future ready.
• Contribute to the overall cybersecurity posture of the organization through adherence to security policies, procedures, and best practices.
• Support emergency incidents and planned maintenance activities, including participation in 24x7 support requirements when necessary.

The key Moderna Mindsets you'll need to succeed in the role

• "We obsess over learning. We don't have to be the smartest we have to learn the fastest."
• "We digitize everywhere possible using the power of code to maximize our impact on patients."

Here's What You'll Need (Minimum Qualifications)

• BS level technical degree or equivalent experience required; Computer Science or Math background preferred
• 8+ years in the technology field, with 4-6+ years working in the identity and access management domain
• 3+ years of experience with CyberArk and Privileged Cloud technologies including hands-on experience with account and safe management, CyberArk administration and configuration, management and troubleshooting of the various CyberArk Privileged Cloud components.
• Hands-on experience with DevOps and Agile methodologies, including implementation and administration of CyberArk's secret management technologies such as Credential Provider, Secrets Hub and Conjur (Cloud or Enterprise)
• Proficiency in English (verbal and/or written) required due to global collaboration needs

Here's What You'll Bring to the Table (Preferred Qualifications)

• Experience with Privileged Access Management principles, best practices, and technologies
• Familiarity with JIT, Least privileged and dynamic privilege concepts
• Strong understanding of virtualization and cloud platforms with knowledge of AWS infrastructure and architecture. Familiarity with other cloud platforms, such as Azure, or GCP a plus.
• Knowledge of both Windows and Unix platforms, with programming (PowerShell, etc.) a plus.
• Understanding of DevOps pipeline and CI/CD tools
• Knowledge and understanding of APIs, specifically RESTful APIs, and familiarity with service-oriented architecture and web services integration.
• Self-starter with ability to work in a team environment, with demonstrated ability to manage multiple competing tasks simultaneously and complete work within allocated timeframes
• Strong knowledge of Information Security frameworks and security architecture frameworks.
• Strong analytical and problem-solving skills
• Ability to work independently and as part of a team

• Relevant certifications such as CISSP, CISM, or CISA are a plus
• CyberArk certification a plus

• Experience with GxP environments and regulatory requirements
• Understanding of security risks and implementation of mitigating controls, and ability to convey risk to all levels of the business, from management to operations and development teams
• Excellent communication and interpersonal skills, including writing and presentation skills
• Embrace a culture of continuous service improvement and service excellence
• A desire to make an impact as part of a high-growth, transformational company that is Bold, Relentless, Curious, and Collaborative

Pay & Benefits

At Moderna, we believe that when you feel your best, you can do your best work. That's why our benefits and well-being resources are designed to support you-at work, at home, and everywhere in between.

• Competitive healthcare, plus voluntary benefit programs to support your unique needs
• A holistic approach to well-being, with access to fitness, mindfulness, and mental health support
• Family planning benefits, including fertility, adoption, and surrogacy support
• Generous paid time off, including vacation, volunteer days, sabbatical, global recharge days, and a discretionary year-end shutdown
• Savings and investments to help you plan for the future
• Location-specific perks and extras

The salary range for this role is $145,900.00 - $234,200.00. This is the lowest to highest salary we in good faith believe we would pay for this role at the time of this posting. An individual's position within the salary range will be based on several factors including, but not limited to, specific competencies, relevant education, qualifications, certifications, experience, skills, performance, and business or organizational needs.The successful candidate may be eligible for an annual discretionary bonus, other incentive compensation, or equity award, subject to company plan eligibility criteria and individual performance.

Our Working Model

As we build our company, we have always believed an in-person culture is critical to our success. Moderna champions the significant benefits of in-office collaboration by embracing a 70/30 work model. This 70% in-office structure helps to foster a culture rich in innovation, teamwork, and direct mentorship. Join us in shaping a world where every interaction is an opportunity to learn, contribute, and make a meaningful impact.

Moderna is a smoke-free, alcohol-free, and drug-free work environment.

Export Control NoticeThis position may involve access to technology or data that is subject to U.S. export control laws, including the Export Administration Regulations (EAR). As such, employment is contingent upon the applicant's ability to access export-controlled information in accordance with U.S. law. Due to the nature of the work and regulatory requirements, only individuals who qualify as U.S. persons (citizens, permanent residents, asylees, or refugees) are eligible for this position. For this role Moderna is unable to sponsor non-U.S. persons to apply for an export control license.#LI-CK1