Leads enterprise Zero Trust strategy across identity, device trust, access, DSPM, and content management security. Owns architecture, standards, governance, operating models, risk management, and cross-functional execution across Security, IT, Product, and Engineering. Builds or leads teams, influences technical leadership, supports audits and customer security reviews, and drives least-privilege access, continuous verification, device posture enforcement, and data-security controls.
Ready to join a team that’s all in? At Imprivata, we deliver unified access and security management programs that eliminate friction, empowering healthcare and mission-critical organizations to work smarter, faster, and more securely.
We believe work can be more than a job or task—it’s a collective spirit; the type that emboldens creativity, embraces challenge, and fosters excitement. We are constantly raising the bar on what’s possible, owning the outcome of our triumphs and trials, staying nimble amidst change, and cultivating an environment where we win together. Here, your ideas matter, your differences are celebrated, and your work drives real results—for your career, your teammates, and our customers.
When you join Imprivata, you embark on a shared journey of ambition and growth. We’re committed to building an inclusive workplace where everyone feels valued and supported. If you’re looking for a place to match your passion with purpose—and where every day you can make an impact—you’ll find it here.
We are seeking a Director, Identity, Device Trust and Zero Trust to join our team. This is a Hybrid opportunity based out of our Waltham, MA OR Austin, TX office.
Job Summary
The Director of Zero Trust, Device Trust & Identity is a senior security leader responsible for defining, driving, and operationalizing the company’s Zero Trust architecture with a primary focus on identity, device trust, and continuous verification. This role owns the strategy and standards that move the organization to least-privilege access, and strong device posture enforcement.
Duties and Responsibilities
Zero Trust Strategy & Architecture
- Own the Zero Trust roadmap for identity, device trust, and access, aligned with the CISO’s enterprise security strategy.
- Define target architecture for continuous authentication, authorization, device posture verification, just-in-time provisioning, short-lived credentials, and context-aware access.
- Establish standards for identity lifecycle management, privileged access, service accounts, machine identities, and workload identities.
- Partner with Product, Engineering, and IT to scale identity controls across the company’s products, assets, and environments.
Device Trust & Modern Access
- Define device trust requirements, including managed versus BYOD, compliance checks, and continuous health assessment.
- Govern MDM and endpoint-management security requirements.
- Establish standards and reference architectures for Tailscale and comparable zero-trust network access solutions.
- Ensure identity and device signals drive access decisions across cloud, SaaS, internal, and customer-facing environments.
Data Security Posture Management
- Own the company-wide DSPM strategy across product environments and corporate IT, including requirements, platform evaluation, vendor selection, implementation,and operations.
- Establish governance, data classification integration, continuous monitoring, remediation workflows, metrics, and sustainable operating processes.
- Partner with Product, Engineering, and IT to use DSPM insights for access decisions, risk prioritization, and Zero Trust controls.
Enterprise Content Management Security
- Serve as the primary security advisor for enterprise content management, collaboration platforms, repositories, and information lifecycle management.
- Define security requirements, architecture guidance, and risk assessments covering identity, access, device trust, data protection, retention, and compliance.
- Collaborate with IT, Product, Privacy and business stakeholders to balance usability, compliance, and security.
Operating Model: Security, IT, Product & Engineering
- Establish ownership, decision rights, escalation paths, service levels, RACI matrices, intake processes, and change-management workflows for identity, device management, access technologies, DSPM, and related controls.
Governance, Risk & Compliance
- Translate Zero Trust and data-security principles into enforceable policies, standards, and control frameworks.
- Support audits, customer security reviews, questionnaires, and compliance requirements involving identity, devices, and data.
- Maintain risk registers and treatment plans with clear ownership and accountability.
Leadership & Influence
- Build and lead a team or matrixed resources focused on identity, device trust, Zero Trust architecture and engineering, and DSPM.
- Influence Product and Engineering leadership to embed secure identity, access, and data-security patterns into platforms and products.
- Serve as an internal thought leader on modern identity, device trust, and data-security practices.
- Other duties as assigned and required
Qualifications
- 10+ years of information-security experience, including significant expertise in IAM, Zero Trust, endpoint security, data security, or related fields.
- Proven experience designing and implementing modern identity or Zero Trust architectures at scale.
- Experience leading DSPM or equivalent data-security strategy, selection, implementation, and operations across product and corporate environments.
- Strong knowledge of JIT provisioning, PAM, MDM and device posture, conditional access, Tailscale or similar network-access technologies, and ECM security.
- Demonstrated success creating operating models across Security, IT, Product, and Engineering.
- Ability to establish technical standards, influence without authority, and drive cross-functional execution.
- Excellent communication skills, with the ability to translate technical concepts into policies, product requirements, and executive-level narratives.
Preferred Qualifications
- Experience in an identity, cybersecurity, or SaaS company.
- Hands-on or architectural experience with identity providers, MDM, conditional access, zero-trust network access, DSPM, and ECM platforms.
- CISSP, CISM, or relevant identity, Zero Trust, or data-security certifications.
- People leadership or large-scale program leadership experience across security and technical organizations.
This position offers a total compensation range of $250,000.00 to $290,000.00 (inclusive of base salary and variable compensation, such as bonuses and incentives). In addition, more information about Imprivata’s benefit offerings can be found here. This range represents the high and low end of Imprivata’s compensation range for this position. Actual compensation will vary and may be above or below the range based on various factors, such as a candidate’s location, skills, experience, and qualifications.
At Imprivata, we have a top-notch work environment, developmental opportunities, a competitive total rewards package, and the desire to have fun. If you have the skills and qualifications as we have described above, we want to hear from you!
Imprivata provides equal employment opportunities, regardless of race, religion, age, sex, national origin, disability status, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.
#LI-Hybrid #LI-SF1
Similar Jobs at Imprivata
Healthtech • Information Technology • Security • Software • Cybersecurity
Leads and matures the third-party risk management program across cybersecurity, privacy, and AI governance. Conducts vendor risk assessments, evaluates data protection and AI practices, manages onboarding through offboarding, monitors continuous and Nth-party risk, tracks remediation, reviews contract terms, supports audits, and maintains governance reporting. Partners with Legal, Privacy, Security, Procurement, AI Governance, and business teams to improve workflows, communicate risks, and develop scalable assessment processes.
Top Skills:
Ai-Assisted Contract Review ToolsCaiqContract Lifecycle Management SystemsDoraEu Ai ActGdprHipaaIso 27001Iso 27701Iso 42001Microsoft 365Nis2Nist 800-53Nist Ai RmfNist CsfSecurity-Rating ToolsSigSoftware Bills Of Materials (Sbom)Tprm/Grc Platforms
Healthtech • Information Technology • Security • Software • Cybersecurity
Implements enterprise software solutions for customers and partners, from technical assessment and planning through deployment, testing, training, and project completion. The role installs and integrates Imprivata products with healthcare, identity, virtualization, database, and mobile device management technologies. Responsibilities include troubleshooting Windows environments, coordinating project activities, maintaining implementation methodologies, developing technical documentation, conducting workshops, and delivering advanced customer and partner training. Extensive domestic travel of approximately 75% is required.
Top Skills:
AuthenticationAutoitCernerCitrixCitrix Endpoint ManagementDirectory ServicesEncryptionEpicFirewallsGroundcontrolHyper-VIdentity ManagementImprivata Confirm IdImprivata OnesignImprivata PamIvanti Endpoint Manager MobileJavaScriptLan/WanMckessonMdmMeditechMicrosoft IntuneMs SqlMySQLNutanixOraclePkiPmpPostgresProvisioningRoutersSalesforceSQLSsisSwitchesVbscriptVdiVMwareWeb SsoWorkspace One Uem
Healthtech • Information Technology • Security • Software • Cybersecurity
Manage full-cycle recruiting across diverse roles, including sourcing, screening, interview coordination, offer negotiation, and candidate communication. Partner with hiring managers to develop recruitment strategies, advise on market trends, maintain applicant tracking records, and collaborate with HR, compensation, and finance teams on workforce planning. Improve recruiting processes and contribute to talent acquisition initiatives.
Top Skills:
Applicant Tracking Systems (Ats)JobviteLinkedin Recruiter
What you need to know about the Los Angeles Tech Scene
Los Angeles is a global leader in entertainment, so it’s no surprise that many of the biggest players in streaming, digital media and game development call the city home. But the city boasts plenty of non-entertainment innovation as well, with tech companies spanning verticals like AI, fintech, e-commerce and biotech. With major universities like Caltech, UCLA, USC and the nearby UC Irvine, the city has a steady supply of top-flight tech and engineering talent — not counting the graduates flocking to Los Angeles from across the world to enjoy its beaches, culture and year-round temperate climate.
Key Facts About Los Angeles Tech
- Number of Tech Workers: 375,800; 5.5% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Snap, Netflix, SpaceX, Disney, Google
- Key Industries: Artificial intelligence, adtech, media, software, game development
- Funding Landscape: $11.6 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Strong Ventures, Fifth Wall, Upfront Ventures, Mucker Capital, Kittyhawk Ventures
- Research Centers and Universities: California Institute of Technology, UCLA, University of Southern California, UC Irvine, Pepperdine, California Institute for Immunology and Immunotherapy, Center for Quantum Science and Engineering
