Ready to join a team that’s all in? At Imprivata, we deliver unified access and security management programs that eliminate friction, empowering healthcare and mission-critical organizations to work smarter, faster, and more securely.
We believe work can be more than a job or task—it’s a collective spirit; the type that emboldens creativity, embraces challenge, and fosters excitement. We are constantly raising the bar on what’s possible, owning the outcome of our triumphs and trials, staying nimble amidst change, and cultivating an environment where we win together. Here, your ideas matter, your differences are celebrated, and your work drives real results—for your career, your teammates, and our customers.
When you join Imprivata, you embark on a shared journey of ambition and growth. We’re committed to building an inclusive workplace where everyone feels valued and supported. If you’re looking for a place to match your passion with purpose—and where every day you can make an impact—you’ll find it here.
Job Summary
The Director of Zero Trust, Device Trust & Identity is a senior security leader responsible for defining, driving, and operationalizing the company’s Zero Trust architecture with a primary focus on identity, device trust, and continuous verification. This role owns the strategy and standards that move the organization to least-privilege access, and strong device posture enforcement.
Zero Trust Strategy & Architecture
- Own the Zero Trust roadmap for identity, device trust, and access, aligned with the CISO’s enterprise security strategy.
- Define target architecture for continuous authentication, authorization, device posture verification, just-in-time provisioning, short-lived credentials, and context-aware access.
- Establish standards for identity lifecycle management, privileged access, service accounts, machine identities, and workload identities.
- Partner with Product, Engineering, and IT to scale identity controls across the company’s products, assets, and environments.
Device Trust & Modern Access
- Define device trust requirements, including managed versus BYOD, compliance checks, and continuous health assessment.
- Govern MDM and endpoint-management security requirements.
- Establish standards and reference architectures for Tailscale and comparable zero-trust network access solutions.
- Ensure identity and device signals drive access decisions across cloud, SaaS, internal, and customer-facing environments.
Data Security Posture Management
- Own the company-wide DSPM strategy across product environments and corporate IT, including requirements, platform evaluation, vendor selection, implementation,and operations.
- Establish governance, data classification integration, continuous monitoring, remediation workflows, metrics, and sustainable operating processes.
- Partner with Product, Engineering, and IT to use DSPM insights for access decisions, risk prioritization, and Zero Trust controls.
Enterprise Content Management Security
- Serve as the primary security advisor for enterprise content management, collaboration platforms, repositories, and information lifecycle management.
- Define security requirements, architecture guidance, and risk assessments covering identity, access, device trust, data protection, retention, and compliance.
- Collaborate with IT, Product, Privacy and business stakeholders to balance usability, compliance, and security.
Operating Model: Security, IT, Product & Engineering
- Establish ownership, decision rights, escalation paths, service levels, RACI matrices, intake processes, and change-management workflows for identity, device management, access technologies, DSPM, and related controls.
Governance, Risk & Compliance
- Translate Zero Trust and data-security principles into enforceable policies, standards, and control frameworks.
- Support audits, customer security reviews, questionnaires, and compliance requirements involving identity, devices, and data.
- Maintain risk registers and treatment plans with clear ownership and accountability.
Leadership & Influence
- Build and lead a team or matrixed resources focused on identity, device trust, Zero Trust architecture and engineering, and DSPM.
- Influence Product and Engineering leadership to embed secure identity, access, and data-security patterns into platforms and products.
- Serve as an internal thought leader on modern identity, device trust, and data-security practices.
- Other duties as assigned and required
Qualifications
- 10+ years of information-security experience, including significant expertise in IAM, Zero Trust, endpoint security, data security, or related fields.
- Proven experience designing and implementing modern identity or Zero Trust architectures at scale.
- Experience leading DSPM or equivalent data-security strategy, selection, implementation, and operations across product and corporate environments.
- Strong knowledge of JIT provisioning, PAM, MDM and device posture, conditional access, Tailscale or similar network-access technologies, and ECM security.
- Demonstrated success creating operating models across Security, IT, Product, and Engineering.
- Ability to establish technical standards, influence without authority, and drive cross-functional execution.
- Excellent communication skills, with the ability to translate technical concepts into policies, product requirements, and executive-level narratives.
Preferred Qualifications
- Experience in an identity, cybersecurity, or SaaS company.
- Hands-on or architectural experience with identity providers, MDM, conditional access, zero-trust network access, DSPM, and ECM platforms.
- CISSP, CISM, or relevant identity, Zero Trust, or data-security certifications.
- People leadership or large-scale program leadership experience across security and technical organizations.
#LI-Hybrid #LI-SF1
Skills Required
- 10+ years of information-security experience, including significant expertise in IAM, Zero Trust, endpoint security, data security, or related fields
- Experience designing and implementing modern identity or Zero Trust architectures at scale
- Experience leading DSPM or equivalent data-security strategy, selection, implementation, and operations across product and corporate environments
- Strong knowledge of JIT provisioning, PAM, MDM and device posture, conditional access, Tailscale or similar network-access technologies, and ECM security
- Experience creating operating models across Security, IT, Product, and Engineering
- Ability to establish technical standards, influence without authority, and drive cross-functional execution
- Excellent communication skills, including translating technical concepts into policies, product requirements, and executive-level narratives
- Experience in an identity, cybersecurity, or SaaS company
- Hands-on or architectural experience with identity providers, MDM, conditional access, zero-trust network access, DSPM, and ECM platforms
- CISSP, CISM, or relevant identity, Zero Trust, or data-security certifications
- People leadership or large-scale program leadership experience across security and technical organizations
What the Team is Saying
.jpg)
.jpg)
Imprivata Compensation & Benefits Highlights
-
Healthcare Strength — Medical coverage includes company funding of half the deductible via HSA/HRA alongside medical, dental, and vision options; feedback suggests healthcare is one of the stronger aspects of the package.
-
Leave & Time Off Breadth — A flexible time-off policy is promoted rather than a fixed vacation bank, and feedback suggests this flexibility supports work-life balance in many teams.
-
Parental & Family Support — Paid parental leave and caregiver resources via Care.com, plus dependent and domestic-partner coverage, indicate a family-oriented set of benefits that goes beyond basic insurance.
Imprivata Insights
What We Do
For more than two decades, Imprivata has been redefining how life- and mission-critical industries secure and manage digital identities. We empower healthcare and enterprise organizations to enable fast, compliant, and secure access to technology—allowing clinicians and staff to stay focused on what matters most: patient care and operational excellence. Our digital identity platform is purpose-built for complex environments where every second counts and security can never take a back seat. From authentication and access management to device, application, and identity governance, Imprivata provides a unified approach that balances usability with protection. Trusted by the world’s leading healthcare systems and enterprises in over 45 countries, we deliver solutions that improve efficiency, safeguard data, and drive digital transformation. At Imprivata, our commitment goes beyond technology—we partner closely with our customers to ensure their success, every step of the way.
Why Work With Us
At Imprivata, every voice matters. We’re a global team driven by innovation, compassion, and collaboration. Together, we live our values—Raise the Bar, Own the Outcome, Stay Nimble, and Win Together—while making a real impact on healthcare, technology, and the communities we serve.
Gallery
.jpg)
.jpg)
Imprivata Offices
Hybrid Workspace
Employees engage in a combination of remote and on-site work.
Imprivata offers a flexible hybrid work model with three in-office days and two remote. Collaboration is key, and schedules are coordinated with managers to balance flexibility and connection.
