Manager, Cybersecurity, Non-Human Identity Security (Remote)

About the role

Stryker is hiring a Manager, Cybersecurity, Non-Human Identity Security for a fully remote position. The manager leads the enterprise program that secures machine and workload identities across cloud, on-premises and CI/CD environments, guiding the full identity lifecycle and partnering with Platform Engineering, Cloud, DevOps, Security Operations and Application teams to reduce risk from hard-coded and unmanaged credentials. Preference is given to candidates living in the Eastern or Central time zones.

Key responsibilities

• Own the enterprise non-human identity security strategy, roadmap, operating model, governance and reporting.
• Establish identity and access controls for API credentials and emerging AI agent identities.
• Support SOX, HIPAA, ISO 27001 and NIST CSF compliance and audit requirements through non-human identity risk reporting.
• Set up and run discovery and inventory of service accounts, secrets, certificates, keys and workload identities.
• Deploy and operate secrets management and machine identity platforms such as HashiCorp Vault, CyberArk Conjur, Azure Key Vault or Venafi.
• Manage PKI and govern certificate issuance, renewal, rotation, revocation and decommissioning.
• Automate secret rotation and remove hard-coded or embedded credentials in code and pipelines.
• Secure managed identities, IAM roles, service principals and other cloud workload identities with least-privilege access and short-lived credentials.
• Integrate non-human identity controls into CI/CD pipelines, DevOps workflows, cloud platforms and infrastructure-as-code.
• Lead analysts and engineers, set standards and priorities, and drive adoption of service account onboarding, ownership, attestation and decommissioning.

Required profile

• Bachelor's degree in Computer Science, Cybersecurity, Information Systems, Engineering or a related discipline.
• Minimum 8 years of experience in identity, cloud or cybersecurity, including at least 3 years focused on machine or non-human identity security.
• Experience securing cloud workload identities and service principals in Azure, AWS or GCP.
• Experience with CI/CD, DevOps, infrastructure-as-code security, people leadership, Zero Trust and least-privilege controls.

Required skills

• Hands-on experience with HashiCorp Vault, CyberArk Conjur, Azure Key Vault, Venafi or comparable platforms.
• PKI, certificate lifecycle management and automated credential rotation.
• Preferred: Master's degree, CISSP, HashiCorp Vault, Venafi or relevant cloud security certification.

Pay ranges are listed by U.S. state, starting at $135,600 per year; travel is none.