Lead Identity Security Engineer

At Bayer we’re visionaries, driven to solve the world’s toughest challenges and striving for a world where 'Health for all Hunger for none’ is no longer a dream, but a real possibility. We’re doing it with energy, curiosity and sheer dedication, always learning from unique perspectives of those around us, expanding our thinking, growing our capabilities and redefining ‘impossible’. There are so many reasons to join us. If you’re hungry to build a varied and meaningful career in a community of brilliant and diverse minds to make a real difference, there’s only one choice.

Lead Identity Security Engineer 

Position Overview:

As a Cybersecurity Solutions Architect at Bayer, you play a pivotal role in designing, implementing, and operating cybersecurity solutions for Bayer’s systems and products. Your expertise in Sailpoint Identity Security Cloud (IdentityNow) ensures compliance with Bayer’s security policies and standards. You collaborate with IT and business partners to embed security in hardware and software evaluation, selection, installation, and configuration processes. Your work maintains the operational efficiency, performance, and reliability of security systems, integrating them into IT service management and incident response processes. You analyze and recommend improvements to network, system, and application architectures, assisting in updating cybersecurity policies, architectures, and standards. You respond to audits, penetration tests, and vulnerability assessments, and design secure infrastructure solutions to prevent unauthorized access. Regular security assessments are conducted to identify vulnerabilities and potential risks, aligning with Cyber Security Architects to implement security architecture standards and best practices.

YOUR TASKS AND RESPONSIBILITIES:

• Design, implement, and operate cybersecurity solutions specialized in Sailpoint Identity Security Cloud (IdentityNow);
• Work with IT and business partners to ensure security in hardware and software evaluation, selection, installation, and configuration;
• Maintain operational efficiency, performance, and reliability of security systems, integrating into IT service management and incident response processes;
• Analyze and recommend improvements to network, system, and application architectures;
• Assist in reviewing and updating cybersecurity policies, architectures, and standards;
• Respond to audits, penetration tests, and vulnerability assessments;
• Design and implement secure infrastructure solutions, including network security, configuration management, storage security, and IAM;
• Conduct regular security assessments to identify vulnerabilities and potential risks;
• Align with Cyber Security Architects to implement security architecture standards and best practices.

WHO YOU ARE:

Bayer seeks an incumbent who possesses the following:

Required Qualifications:

• BS or MA in computer science, cybersecurity, or a related field, though relevant working experience may be considered an equivalent;
• Experience with scripting, software development, or web development using PowerShell or Python for automation;
• ITIL knowledge in processes (Incident, Problem, Change & Request Management) and tools (ServiceNow) preferred;
• Experience with Microsoft Azure, AWS, or GCP cloud services is advantageous;
• Experience working in a regulated environment (e.g., GxP) is advantageous;
• Experience with agile methodology such as SCRUM and/or tools such as Azure DevOps.

Preferred Qualifications:

• 7-10+ years of experience in a leading role within cybersecurity, with previous experience in a security engineering role highly desired;
• At least 3 years of experience and ideally certified with IAM solutions specialized in Sailpoint Identity Security Cloud (IdentityNow), complemented by experience in Entra ID and CyberArk;
• Certified Information Systems Security Professional (CISSP) desired but not required;
• Understanding of organizational mission, values, and goals and consistently applying this knowledge.