Senior Cyber Security Engineer (Identity & PAM)

About the role

Merck's IT Risk Management & Security division is looking for an experienced Senior Cyber Security Engineer to strengthen its identity security and Privileged Access Management (PAM) capabilities. The role works on key initiatives such as securing global manufacturing sites and shaping access controls for AI agents, within an agile, collaborative global team across the US, the Czech Republic and India.

Key responsibilities

• Lead the full deployment, configuration and launch of a new secrets management platform from scratch
• Manage and develop existing privileged access and secrets management systems, on-premises and in the cloud
• Partner with application, infrastructure and security teams worldwide to eliminate risks and implement modern standards
• Integrate security tools with automation (PowerShell) and modern CI/CD pipelines
• Help define the guardrails for secure governance of AI agents

Required profile

• At least 5 years of experience in identity management (IAM/PAM) or enterprise infrastructure security
• Hands-on experience administering privileged access tools such as Secret Server
• Ability to work in a global team and communicate in English

Required skills

• HashiCorp Vault, Active Directory or Microsoft Entra ID
• Securing access in public clouds such as AWS, Microsoft Azure or Google Cloud
• PowerShell scripting to connect security systems with automation
• Understanding of password rotation, vaulting, secrets management and least-privilege access

What we offer

• Hybrid working model with a flexible role pattern
• Competitive salary and incentive pay, pension and health insurance contributions
• Annual leave of 5 weeks, 5 sick days and 15 days of certified sick leave paid above statutory requirements
• Cafeteria with tax-free benefits, multisport card, Vodafone, Raiffeisen Bank, Foodora and discount programs
• Up-to-date laptop and iPhone, parking, showers, refreshments, massage chairs, library and music corner