About Us:

As a not-for-profit organization, Mass General Brigham is committed to supporting patient care, research, teaching, and service to the community by leading innovation across our system. Founded by Brigham and Women’s Hospital and Massachusetts General Hospital, Mass General Brigham supports a complete continuum of care including community and specialty hospitals, a managed care organization, a physician network, community health centers, home care and other health-related entities. Several of our hospitals are teaching affiliates of Harvard Medical School, and our system is a national leader in biomedical research.

We’re focused on a people-first culture for our system’s patients and our professional family. That’s why we provide our employees with more ways to achieve their potential. Mass General Brigham is committed to aligning our employees’ personal aspirations with projects that match their capabilities and creating a culture that empowers our managers to become trusted mentors. We support each member of our team to own their personal development—and we recognize success at every step.

Our employees use the Mass General Brigham values to govern decisions, actions and behaviors. These values guide how we get our work done: Patients, Affordability, Accountability & Service Commitment, Decisiveness, Innovation & Thoughtful Risk; and how we treat each other: Diversity & Inclusion, Integrity & Respect, Learning, Continuous Improvement & Personal Growth, Teamwork & Collaboration.

General Summary/ Overview:

The CyberArk/PAM engineer would be required to tackle complex security engineering challenges within the identity and privileged access management domain. They will maintain and enhance existing security controls while actively working to drive the design and deployment of new solutions or service offerings while also optimizing existing PAM infrastructure and services. They will proactively identify and address vulnerabilities or deficiencies, develop and implement robust controls to mitigate these risks, create and maintain detailed documentation, and implement mechanisms to ensure the effectiveness of solutions. The applicant is expected to work independently on complex problem, with experience leading technical implementations, coordinating efforts across teams, and overseeing the work of more junior engineers. In this capacity, the CyberArk/PAM Engineer provides technical guidance and mentorship to team members, fostering their professional development.

Principal Duties and Responsibilities:

· Takes ownership of specific modules or components within the Privileged Access Management domain, from design to implementation.

· Leads the design and implementation of PAM solutions.

· Acts as a technical leader within the team, guiding and mentoring junior level engineers

· Drives innovation by researching and proposing improved security solutions and technologies within their domain.

· Reviews and provides constructive feedback on build/code contributions from team members.

· Ensures high-quality, and maintainable solutions through code/build review and best practice implementation.

· Solves complex technical problems, including system-wide issues and critical incidents.

· Drives cross-functional collaboration with vendors, partners and stakeholders to maximize the effectiveness of our solutions.

· Provides consulting assistance to all levels of staff to assist with issues and concerns relating to Privileged Access Management at Mass General Brigham

· After hours and weekend work is required to perform tasks that cannot be done during business hours. Participates in on-call pager rotation

· Develop an understanding of Mass General Brigham applications, information security & privacy concepts and best practices, and service management offerings

· Use/s the Mass General Brigham values to govern decisions, actions and behaviors. These values guide how we get our work done: Patients, Affordability, Accountability & Service Commitment, Decisiveness, Innovation & Thoughtful Risk; and how we treat each other: Diversity & Inclusion, Integrity & Respect, Learning, Continuous Improvement & Personal Growth, Teamwork & Collaboration

Working Conditions:

· Normal Office conditions in Hybrid Remote/Office Context

· Possible local travel to Mass General Brigham sites

· While performing the duties of this job, the employee is frequently required to sit; talk; or hear; use hands to finger; handle; or feel; reach with hands and arms. The employee is occasionally required to stand; walk; and stoop; kneel; or crouch. The employee must frequently lift and/or move up to 5 pounds and occasionally lift and/or move up to 20 pounds. Specific vision abilities required by this job include close vision, distance vision and depth perception.

· The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of this job. Normal office working conditions. The noise level in the work environment is quiet to moderate.

· Current relevant experience with PAM solutions, specifically Cyberark Privileged Access Management, Conjur, and Secrets Management.

· Relevant firsthand knowledge with enterprise identity and access management providers/products such as Okta and Microsoft Entra, with proficient understanding of authentication and authorization concepts utilizing protocols such as SAML, OAuth, OIDC, etc.

· Enterprise experience and knowledge with currently supported operating systems (both Windows and Linux), Microsoft Active Directory on-premise, group policies, Azure Active Directory, or general knowledge of other LDAP related directory stores or universal directories.

· Knowledge of monitoring and auditing of privileged access events utilizing capabilities within Cyberark, or with SIEM products such as Splunk Enterprise Security

· Confident, respectful, and responsive communicator with active listening skills, and the ability to speak to all levels of business and technology partners, utilizing communication tools such as Microsoft Teams, as well as email and in-person.

· Self-motivated team player, with proven organizational skills and the ability to self-direct and work independently.

· Proficient troubleshooting and problem-solving skills with the ability to work collaboratively with other teams to resolve issues

· Solid understanding of IT service delivery processes and methodologies (e.g., ITIL)

· Relevant industry certifications not required but preferred.

· Bachelor’s or Masters Degree in Computer Science or related field preferred

Skills/Abilities/Competencies:

· Expertise in Privledged Access Management and Cybersecurity concepts and best practices

· Expertise with Cyberark Privileged Access Management, Conjur, and Secrets Management.

· Deep understanding of system architecture and design

· Strong communication and project management skills

· Track record of delivering successful projects and implementations

Mass General Brigham is an Equal Opportunity Employer. By embracing diverse skills, perspectives and ideas, we choose to lead. All qualified applicants will receive consideration for employment without regard to race, color, religious creed, national origin, sex, age, gender identity, disability, sexual orientation, military service, genetic information, and/or other status protected under law. We will ensure that all individuals with a disability are provided a reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment.