网络安全经理 - 非人类身份安全 - 远程
Manager, Cybersecurity, Non-Human Identity Security - Remote
工作灵活性：远程
优先考虑居住在东部或中部时区的候选人
作为非人类身份（NHI）经理，您将领导企业级项目，以在云、本地和CI/CD环境中保护机器和工作负载身份。您将管理整个身份生命周期，并与平台工程、云、DevOps、安全运营和应用团队合作，降低硬编码和未管理凭证的风险。
您将负责：
•负责企业非人类身份安全策略、路线图、运营模式、治理和报告。
•为API凭证和新兴AI代理身份建立身份和访问控制。
•通过非人类身份风险报告支持SOX、HIPAA、ISO 27001和NIST CSF合规性和审计要求。
技术职责：
•在企业范围内建立并运行服务账户、秘密、证书、密钥和工作负载身份的发现和库存流程。
•部署和运行秘密管理和机器身份平台，包括HashiCorp Vault、CyberArk Conjur、Azure Key Vault或Venafi。
•管理PKI并监督证书的颁发、续订、轮换、吊销和退役，防止因证书过期导致的中断。
•自动化秘密轮换，并消除代码和流水线中的硬编码或嵌入式凭证。
•使用最小权限访问和短期凭证来保护托管身份、IAM角色、服务主体和其他云工作负载身份。
•将非人类身份控制集成到CI/CD流水线、DevOps工作流、云平台和基础设施即代码实践中。
领导力与人员管理职责：
•通过设定标准、优先级、绩效期望和项目交付的责任制来领导分析师和工程师。
•推动跨职能团队采用服务账户的注册、所有权、验证和退役实践。
知识与能力：
•评估身份风险，分析复杂的安全问题，并将发现转化为实际的控制措施和修复优先级。
•向技术团队、业务合作伙伴和审计利益相关者传达非人类身份风险、决策和项目要求。
•在机器、工作负载、云、API和AI代理身份中应用零信任和最小权限原则。
您需要具备：
所需资格
•计算机科学、网络安全等相关专业的学士学位
查看英文原文
Work Flexibility: Remote
Preference will be given to candidates residing in the Eastern or Central time zones.
As a Non-Human Identity (NHI) Manager, you will lead the enterprise program that secures machine and workload identities across cloud, on-premises, and CI/CD environments. You will guide the full identity lifecycle and partner with Platform Engineering, Cloud, DevOps, Security Operations, and Application teams to reduce risk from hard-coded and unmanaged credentials.
What you will do:
•Own the enterprise non-human identity security strategy, roadmap, operating model, governance, and reporting.
•Establish identity and access controls for API credentials and emerging AI agent identities.
•Support SOX, HIPAA, ISO 27001, and NIST CSF compliance and audit requirements through non-human identity risk reporting.
Technical Responsibilities:
•Establish and operate discovery and inventory processes for service accounts, secrets, certificates, keys, and workload identities across the enterprise.
•Deploy and operate secrets management and machine identity platforms, including HashiCorp Vault, CyberArk Conjur, Azure Key Vault, or Venafi.
•Manage PKI and govern certificate issuance, renewal, rotation, revocation, and decommissioning to prevent outages caused by expired certificates.
•Automate secret rotation and eliminate hard-coded or embedded credentials in code and pipelines.
•Secure managed identities, IAM roles, service principals, and other cloud workload identities using least-privilege access and short-lived credentials.
•Integrate non-human identity controls into CI/CD pipelines, DevOps workflows, cloud platforms, and infrastructure-as-code practices.
Leadership & People Management Responsibilities:
•Lead analysts and engineers by setting standards, priorities, performance expectations, and accountability for program delivery.
•Drive cross-functional adoption of service account onboarding, ownership, attestation, and decommissioning practices.
Knowledge and Capabilities:
•Assess identity risk, analyze complex security issues, and translate findings into practical controls and remediation priorities.
•Communicate non-human identity risks, decisions, and program requirements to technical teams, business partners, and audit stakeholders.
•Apply Zero Trust and least-privilege principles across machine, workload, cloud, API, and AI agent identities.
What You Need:
Required Qualifications
•Bachelor's degree in Computer Science, Cybersecurity, Information Systems, Engineering, or a related discipline.
•Minimum 8 years of experience in identity, cloud, or cybersecurity, including a minimum 3 years of experience focused on machine or non-human identity security.
•Hands-on experience with HashiCorp Vault, CyberArk Conjur, Azure Key Vault, Venafi, or comparable secrets management and machine identity platforms.
•Experience with PKI, certificate lifecycle management, and automated credential rotation.
•Experience securing cloud workload identities and service principals in Azure, AWS, or GCP.
•Experience with CI/CD, DevOps, infrastructure-as-code security, people leadership, Zero Trust, and least-privilege controls.
Preferred Qualifications
•Master's degree in Computer Science, Cybersecurity, Information Systems, Engineering, or a related discipline.
•CISSP, HashiCorp Vault, Venafi, or relevant cloud security certification.
United States of America Pay Ranges:
- USN: $135,600 - $225,900 USD Annual
- US5: $142,400 - $237,200 USD Annual
- US10: $149,200 - $248,500 USD Annual
- US15: $155,900 - $259,800 USD Annual
- US20: $162,700 - $271,100 USD Annual
- US30: $176,300 - $293,700 USD Annual
View the U.S. work location and transparency guide to find the pay range for your location.
Travel Percentage: NoneStryker Corporation is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, ethnicity, color, religion, sex, gender identity, sexual orientation, national origin, disability, or protected veteran status. Stryker is an EO employer – M/F/Veteran/Disability.Stryker Corporation will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor’s legal duty to furnish information.Originally posted on Himalayas