We are the people who give possibilities purpose

BD is one of the largest global medical technology companies in the world. Advancing the world of health™ is our Purpose, and it’s no small feat. It takes the imagination and passion of all of us—from design and engineering to the manufacturing and marketing of our billions of MedTech products per year—to look at the impossible and find transformative solutions that turn dreams into possibilities.

Job Description

The Cloud Privileged Access Lead is responsible for driving and maturing BD’s Cloud Privileged Access Management (PAM) program across Azure, AWS, and GCP. This role partners closely with IAM Architects, Operations teams, and stakeholders across the enterprise to design, implement, and support advanced PAM capabilities that protect critical cloud and enterprise assets.

The position plays a key role in aligning IAM security with BD’s overall cybersecurity strategy, ensuring compliance with regulatory and internal requirements, and continuously improving PAM controls based on risk prioritization and business outcomes.

This role offers the opportunity to shape and lead a critical cloud security capability within a global organization, working at the intersection of cybersecurity strategy, cloud technology, and enterprise risk management, with clear visibility and impact across the business.

Responsibilities

Cloud PAM Strategy & Implementation

• Lead the design, implementation, and ongoing enhancement of Cloud PAM solutions across Azure, AWS, and GCP.
• Identify, onboard, and manage privileged accounts across enterprise cloud platforms, ensuring secure vaulting and access controls.
• Enable and operate advanced PAM capabilities including password auto‑rotation, session monitoring and recording, just‑in‑time (JIT) access, key management, and secrets management.
• Collaborate with IAM Architects to ensure PAM solutions are scalable, resilient, and aligned with enterprise architecture standards.

Stakeholder Collaboration & Delivery

• Work closely with cloud engineering, security operations, compliance, audit, and infrastructure teams to drive PAM adoption and integration.
• Act as a subject matter expert for privileged access across cloud‑first environments.
• Communicate technical concepts, risks, and recommendations effectively to architects, leaders, and cross‑functional stakeholders.

Governance, Risk & Compliance

• Ensure PAM controls adhere to regulatory, audit, and internal IAM standards and policies.
• Support compliance and audit activities, including evidence collection, remediation efforts, and control improvements.
• Assist in maintaining and enhancing IAM policies, standards, and procedures related to privileged access.

Documentation, Enablement & Capability Building

• Develop and maintain documentation, SOPs, and operational runbooks for PAM processes.
• Facilitate training and knowledge transfer to operations teams.
• Mentor junior IAM team members and contribute to broader IAM capability development.

Continuous Improvement & Innovation

• Proactively research emerging PAM, IAM, and cloud security technologies and features.
• Share insights and recommendations with leadership and help drive implementation of new capabilities.
• Contribute to the continuous improvement of BD’s IAM and PAM security posture based on evolving risks and business priorities.

Requirements

• 15+ years of relevant experience, of which a minimum 2–3 years hands on experience with Azure PAM / Cloud PAM.
• Extensive experience in Cybersecurity with strong focus on Identity & Access Management (IAM) and Privileged Access Management (PAM).
• Hands‑on experience implementing and operating Cloud PAM solutions across Azure, AWS, and/or GCP.
• Strong knowledge of Azure Active Directory (Microsoft Entra ID), Azure PIM, and cloud‑native IAM services.
• Experience with enterprise PAM platforms (e.g., Azure PIM, HashiCorp Vault, or equivalent).
• Solid understanding of Active Directory, role‑based and class‑based access controls.
• Proven experience working in cloud‑first, enterprise‑scale environments.
• Ability to operate at both strategic and hands‑on technical levels.
• Relevant security or cloud certifications (e.g., CISSP, CISA, CISM, Microsoft Entra/Azure Security, AWS Security, Cloud PAM certifications).
• Experience supporting regulatory audits and compliance frameworks in a global enterprise.
• Strong documentation, communication, and stakeholder management skills.

Why Join Us?

To find purpose in the possibilities, we need people who can see the bigger picture, who understand the human story that underpins everything we do. We welcome people with the imagination and drive to help us reinvent the future of healthcare. At BD, you’ll discover a culture in which you can learn, grow and thrive.

We believe that when people connect in person, we learn faster, collaborate more deeply, and build a stronger culture. Join us and enjoy a culture where face-to-face collaboration supports your learning, your progress, and your success.

To learn more about BD visithttps://bd.com/careers.

Becton, Dickinson, and Company is an Equal Opportunity Employer. We evaluate applicants without regard to race, color, religion, age, sex, creed, national origin, ancestry, citizenship status, marital or domestic or civil union status, familial status, affectional or sexual orientation, gender identity or expression, genetics, disability, military eligibility or veteran status, and other legally protected characteristics.

Required Skills

Optional Skills

.

Primary Work Location

Additional Locations

Work Shift