At Danaher,an Identity SecurityArchitectis responsible fordesigningand implementingidentity-security architecture across allDanaherdigital principlesIn this role, enterprise strategy is setcollaborativelybybusiness, IT, andsecuritystakeholders. Theroleshapes and refines the identity-securityrequirements, then owns turning it into adoptable designs for authentication, authorization, lifecycle, governance, federation, conditional access, and identity threat detection.The role requires that individualsworkbothindependently and integrates withstakeholders inHR, ITSM, infrastructure, cloud, and application teams.

This position reports to the Director, Identity Security & Privileged Access Managementand is part of theenterprise-wide Danaher Information Security (DIS) Identity & Privileged Access Managementteam; this position is remote.

In this role, you will have the opportunity to:

• Architect identity security across workforce, privileged, machine, customer, and partner identities: authentication, authorization, lifecycle, IGA, federation, conditional access, ITDR.

• Design safe authenticator recovery and service-desk anti-social-engineeringcontrols.

• Engineer/prototype integration patterns (HRIS, directories, IdP, SIEM/UEBA) tovalidatedesigns.

• Design the sustainability & governance model: role/entitlement models, identity analytics, and architecture review cadence.

The essential requirements of the job include:

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or related field.

• 9+ years of cybersecurity experience with a focus on identity and access management (GCRF P4 Bachelor's-track minimum; recommended, pending Comp sign-off).

• Experience designing identity security architecture across workforce, privileged, machine, or customer identities — including authentication, authorization, Joiner-Mover-Leaver lifecycle, role/entitlement modeling, access certification, and Segregation of Duties.

• Hands-on experience with enterprise identity platforms (such as Microsoft Entra ID, Okta, Ping, SailPoint, or Saviynt) and identity protocols (SAML, OIDC, OAuth, SCIM).

• Experience working independently with HR, IT service management, infrastructure, and application teams to design and govern identity controls.

It would be a plus if you alsopossesspreviousexperience in:

• Experience with identity threat detection and response (ITDR), identity analytics/UEBA, or non-human / machine identity governance (NHI).

• CISSP, CISM, Microsoft SC-300, or a relevant IAM platform certification.