The posting
About Astellas
Astellas is a global life sciences company committed to turning innovative science into VALUE for patients. We provide transformative therapies in disease areas that include oncology, ophthalmology, urology, immunology and women's health. Through our research and development programs, we are pioneering new healthcare solutions for diseases with high unmet medical need. Learn more at Astellas.com.
Are you driven to make a real difference in the lives of patients?
We're seeking passionate individuals who thrive in dynamic environments, embrace new ideas, and aren't afraid to take intelligent risks. People who act with unwavering integrity and are deeply committed to making a tangible impact.
Purpose and Scope:
As an Privilege and Access Management (PAM) Engineer, you will play a key role in protecting our organization’s digital assets by ensuring secure, compliant, and efficient management of user identities and access across systems and applications. This position has been established as part of our initiative to strengthen internal IAM operations, enhance automation in identity lifecycle management, and advance towards a ‘best in industry’ access governance framework.
Responsibilities and Accountabilities:
- Serve as the technical SME for Privileged Access Management (PAM), responsible for the design, implementation, administration, support, and continuous improvement of enterprise PAM capabilities.
- Manage and maintain PAM platforms, including privileged account onboarding, password vaulting, automated credential rotation, privileged session management, and Just-In-Time (JIT) access controls.
- Provide day-to-day operational support, troubleshooting, monitoring, upgrades, patching, and performance management of PAM infrastructure and services.
- Develop and maintain automation, custom integrations, APIs, workflows, scripts, and reporting solutions to improve PAM operational efficiency and user experience.
- Integrate PAM solutions with Active Directory, Microsoft Entra ID, cloud platforms, operating systems, databases, enterprise applications, ITSM, SIEM, and security tools.
- Support audit, compliance, risk management, and security investigations by providing evidence, reporting, control validation, and remediation recommendations.
- Create and maintain PAM standards, operational procedures, runbooks, technical documentation, and knowledge articles.
- Collaborate with Cybersecurity, Infrastructure, Cloud, Application, and Vendor teams to deliver secure, scalable, and compliant privileged access solutions.
- Drive adoption of security best practices including Least Privilege, Zero Trust, RBAC, and privileged identity governance across the organization.
- Act as an independent contributor capable of managing operational, engineering, and development activities while providing technical leadership and guidance on PAM-related initiatives.
Required Qualifications:
- 5-8 years of hands-on experience in Privileged Access Management (PAM), Identity & Access Management (IAM), and enterprise cybersecurity environments.
- Proven experience in designing, implementing, administering, and supporting enterprise PAM solutions (one or more) such as CyberArk, Delinea, BeyondTrust, One Identity Safeguard, HashiCorp Vault, or Microsoft Entra PIM.
- Strong experience managing privileged accounts, service accounts, non-human identities (NHI), secrets management, credential rotation, privileged session management, and access governance.
- Hands-on experience with Active Directory, Microsoft Entra ID, Windows, Linux, cloud platforms (Azure/AWS/GCP), and enterprise application integrations.
- Proficiency in PowerShell, Python, REST APIs, and automation development to streamline PAM operations, onboarding, reporting, and compliance processes.
- Strong understanding of cybersecurity principles including Least Privilege, Zero Trust, RBAC, privileged identity governance, and regulatory compliance requirements.
- Strong analytical, troubleshooting, communication, documentation, and stakeholder management skills.
- PAM Solution Certifications such as: CyberArk Defender/Sentry Certification or equivalent
- Bachelor’s degree in computer science, Information Technology, Cybersecurity, or equivalent experience;
Preferred Qualifications:
- Microsoft Identity and Access Administrator Certification.
- CISSP, CISM, Security+, or equivalent security certifications.
- Experience integrating PAM with ServiceNow, SIEM, EDR, and cloud-native services.
- Experience managing privileged service accounts, gMSA, and application credentials.
Working Environment:
At Astellas we recognize the importance of work/life balance, and we are proud to offer a hybrid working solution allowing time to connect with colleagues at the office with the flexibility to also work from home. We believe this will optimize the most productive work environment for all employees to succeed and deliver. Hybrid work from certain locations may be permitted in accordance with Astellas’ Responsible Flexibility.
This position is based in Bengaluru, India and will require on-site work.
What awaits you at Astellas?
- Global collaboration: Become part of a connected global business of like-minded life science leaders, all dedicated to improving patients' lives worldwide.
- Real-world patient impact: Contribute to transformative therapies that reach patients around the world, knowing your work makes a difference every day.
- Relentless Innovation: Join a company at the forefront of scientific breakthroughs, where you'll have the opportunity to shape the future of healthcare.
- A Culture of Growth: Chart your own course within a supportive environment that values your contributions, champions your development, and empowers you to pursue your passions.
Our Organizational Values and Behaviors
Values: Innovation, Integrity and Impact sit at the heart of what we do.
Behaviors: We come together as ‘One Astellas’, working with courage and a sense of urgency. We are outcome focused and consistently take accountability for our personal contribution.
