Senior Manager, Privileged Access Management (PAM)

Pfizer • Bothell, WA

1d • Hybrid

About The Position

Technology impacts everything we do. Pfizer’s digital and ‘data first’ strategy focuses on implementing impactful and innovative technology solutions across all functions from research to manufacturing. Whether you are digitizing drug discovery and development, identifying solutions, or making our work easier and faster, you will be making a difference to countless lives. Pfizer’s CISO organization delivers proactive cyber defense for Pfizer global enterprise. Our mission is to secure all of Pfizer’s digital information assets ranging from our scientific breakthroughs to the manufacturing floor, and out to the patients we serve. We achieve this mission through a combination of world-class talent, top-tier technologies, industry leading best practices, and the promotion of a cybersecurity ownership culture across the company. Strong identity and privileged access controls are vital to Pfizer’s cybersecurity posture and operational resilience. The Senior Manager, Privileged Access Management (PAM), is responsible for leading the strategy, delivery, and ongoing management of enterprise PAM technologies across Pfizer Digital. This role drives innovation to reduce privileged access risk, strengthen least-privilege controls, and improve the user experience across enterprise, cloud, application, and machine-to-machine environments. This is a hands-on technical role responsible for modernizing and operating privileged access capabilities that support evolving business and security requirements. The role will help advance Pfizer’s PAM services across privileged user access, service accounts, machine identities, API secrets, cloud controls, session management, credential rotation, and break-glass access while ensuring the platform remains secure, scalable, reliable, and easy to use. The Senior Manager will provide technical direction, solution expertise, and cross-functional leadership for PAM enhancements, continuous improvement initiatives, and service operations. Responsibilities include driving requirements definition, solution design, technical specifications, development, testing, implementation support, and break/fix activities for PAM platforms and related services. This role interprets internal and external business challenges, applies industry best practices, and recommends improvements to products, processes, services, and controls.

Requirements

• Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, Engineering, or a related discipline.
• 6+ years of experience in IT, identity and access management, cybersecurity, infrastructure, or related enterprise technology roles or a Master's degree and 5+ years of related experience required; or a PhD and 1+ years of related experience required.
• 5+ years of hands-on experience with privileged access management in large, complex enterprise environments.
• Proven experience serving as a technical lead or senior subject matter expert for complex, cross-functional enterprise technology initiatives.
• Extensive experience designing, implementing, integrating, and operating PAM platforms such as CyberArk, BeyondTrust, Delinea/Thycotic, or similar technologies.
• Strong understanding of related security capabilities, including IAM, MFA, SSO, secrets management, credential rotation, session management, least privilege, and threat detection.
• Experience integrating PAM solutions across cloud, on-premises, IaaS, SaaS, Windows, Linux, database, network, and application environments, including Azure and AWS.
• Experience working in Agile environments and using Agile delivery tools, with a collaborative mindset, adaptability to change, and a proactive approach to problem solving.
• Experience using automation tools, APIs, and scripting languages such as PowerShell or Python to streamline privileged access processes and improve operational efficiency.
• Understanding of regulatory requirements, audit expectations, and industry standards related to cybersecurity, data protection, privacy, and access controls, including SOX, HIPAA, GDPR, and CCPA.
• Proven experience in developing, implementing, and enforcing security policies and procedures to ensure compliance with applicable laws and regulations.
• Demonstrated ability to develop and execute PAM strategies and roadmaps aligned to organizational goals, risk reduction priorities, and industry best practices.
• Excellent verbal and written communication skills, with the ability to explain complex technical concepts to senior leaders, business stakeholders, and non-technical audiences.
• Strong analytical and problem-solving skills, with a proactive approach to identifying and addressing security risks and operational challenges.
• Ability to collaborate across departments and teams while fostering a culture of security awareness, accountability, and continuous improvement.

Nice To Haves

• Master’s degree in relevant discipline.
• Deep expertise in Microsoft solutions is highly desirable.
• Candidate demonstrates a breadth of diverse leadership experiences and capabilities including: the ability to influence and collaborate with peers, develop and coach others, oversee and guide the work of other colleagues to achieve meaningful outcomes and create business impact.

Responsibilities

• Lead and manage enterprise Privileged Access Management services, ensuring platform reliability, security, scalability, compliance, and operational resilience.
• Define, develop, deploy, and maintain PAM solutions that meet business, technical, cybersecurity, audit, and regulatory requirements.
• Operate independently in ambiguous environments while driving objectives across teams and service areas.
• Integrate applications, infrastructure targets, service accounts, secrets, and third-party platforms into PAM services, including upgrades and ongoing lifecycle support.
• Provide technical direction for PAM enhancements and service improvements.
• Partner with service owners, operations leads, application teams, cloud teams, cybersecurity stakeholders, and customers to translate business needs into secure and scalable PAM solutions.
• Build and maintain service patterns, technical workflows, architecture diagrams, implementation documentation, operational runbooks, and SDLC artifacts.
• Develop and maintain automation using APIs, scripting, front-end capabilities, and industry-standard PAM technologies to improve efficiency, consistency, and user experience.
• Create and manage Infrastructure as Code solutions, including Terraform, to automate cloud infrastructure across platforms.
• Ensure code quality, security, maintainability, and adherence to development lifecycle best practices, including reviews, documentation, and testing.
• Design and execute unit, smoke, functional, and regression testing to support reliable code deployment.
• Identify and implement continuous improvement opportunities that reduce manual work, strengthen controls, improve service reliability, and enhance the privileged access user experience.
• Support business-as-usual operations, including service health, planned maintenance, emergency response, and 24x7 escalation support as needed.
• Manage incidents, problems, and service risks using ITIL-aligned practices, including root cause analysis, remediation planning, and stakeholder communication.
• Provide technical leadership and clear communication to technical and non-technical stakeholders.

Benefits

• 401(k) plan with Pfizer Matching Contributions and an additional Pfizer Retirement Savings Contribution
• paid vacation, holiday and personal days
• paid caregiver/parental and medical leave
• health benefits to include medical, prescription drug, dental and vision coverage
• Relocation assistance may be available based on business needs and/or eligibility.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior