Job description

Are you ready to help secure the digital experience and commerce ecosystem for a global leader in scientific discovery? Waters are seeking a Lead Identity & Application Security Engineer to support the security, resilience, and compliance of our customer-facing digital platforms. This role combines expertise in Identity and Access Management (IAM), Web Security, and Application Security to help protect critical business applications and digital services used across our global organization. This is an excellent opportunity for a security professional who brings strong experience in either Identity Security or Application Security and is looking to broaden their impact across multiple security domains. Identity & Access Management • Support the design and continuous improvement of identity and access management controls. • Manage authentication, authorization, and access governance capabilities using technologies such as Okta and Azure AD. • Promote best practices including RBAC, MFA, PAM and least-privilege access principles. Application & Web Security • Implement and manage WAF policies and security controls, including bot mitigation and rule optimization. • Support secure code reviews, penetration testing, DAST, and vulnerability assessment activities. • Partner with engineering teams to improve secure development practices and address security risks. Security Operations & Risk Management • Identify, assess and track vulnerabilities, supporting remediation activities based on risk and business impact. • Collaborate with Security Operations teams to investigate threats and strengthen detection capabilities. • Support SIEM monitoring, log analysis, and security reporting activities. Technical Leadership • Provide technical guidance across Identity Security, Application Security and Digital Platform Security initiatives. Required • 5+ years of experience in IAM, Application Security, Web Security or related Cybersecurity Engineering roles. • Hands-on experience with Okta, Azure AD or similar identity platforms. • Understanding SAML, OAuth2, OpenID Connect and LDAP. • Experience with WAF and CDN security technologies such as Akamai or Cloudflare. • Knowledge of RBAC, MFA, PAM, and identity governance concepts. • Familiarity with OWASP Top 10, API security and application security testing. • Scripting or automation experience using PowerShell, Python or similar technologies. • Strong communication and stakeholder management skills. Preferred • CISSP, CCSP, GIAC, or equivalent certification. • Experience supporting customer-facing web applications or digital platforms. • Knowledge of Zero Trust and modern Identity Security architectures. Waters Corporation (NYSE:WAT) is a global leader in life sciences and diagnostics, dedicated to accelerating the benefits of pioneering science through analytical technologies, informatics, and service. With a focus on regulated, high-volume testing environments, our innovative portfolio harnesses deep scientific expertise across chemistry, physics, and biology. We collaborate with customers around the world to advance the release of effective, high-quality medicines, ensure the safety of food and water, and drive better patient outcomes by detecting diseases earlier, managing routine infections, and combating antibiotic resistance. Through a shared culture of relentless innovation, our passionate team of ~16,000 colleagues turn scientific challenges into breakthroughs that improve lives worldwide. Diversity and inclusion are fundamental to our core values at Waters Corporation. It benefits our employees, our products, our customers and our community. Waters complies with all applicable federal, state, and local laws. Qualified applicants are considered without regard to sex, race, color, ancestry, national origin, citizenship status, religion, age, marital status (including civil unions), military service, veteran status, pregnancy (including childbirth and related medical conditions), genetic information, sexual orientation, gender identity, legally recognized disability, domestic violence victim status, or any other characteristic protected by law. Waters is proud to be an equal opportunity workplace and is an affirmative action employer. All hiring decisions are based solely on qualifications, merit, and business needs at the time. WAF, CDN, IAM, Akamai, Application Security

Requirements

Must-haves

Are you ready to help secure the digital experience and commerce ecosystem for a global leader in scientific discovery?
This is an excellent opportunity for a security professional who brings strong experience in either Identity Security or Application Security and is looking to broaden their impact across multiple security domains.
Identity & Access Management
Support the design and continuous improvement of identity and access management controls.
Manage authentication, authorization, and access governance capabilities using technologies such as Okta and Azure AD.
Promote best practices including RBAC, MFA, PAM and least-privilege access principles.
Application & Web Security
Implement and manage WAF policies and security controls, including bot mitigation and rule optimization.
Support secure code reviews, penetration testing, DAST, and vulnerability assessment activities.
Partner with engineering teams to improve secure development practices and address security risks.
Security Operations & Risk Management
Identify, assess and track vulnerabilities, supporting remediation activities based on risk and business impact.
Collaborate with Security Operations teams to investigate threats and strengthen detection capabilities.
Support SIEM monitoring, log analysis, and security reporting activities.
Technical Leadership
Provide technical guidance across Identity Security, Application Security and Digital Platform Security initiatives.
5+ years of experience in IAM, Application Security, Web Security or related Cybersecurity Engineering roles.
Hands-on experience with Okta, Azure AD or similar identity platforms.
Understanding SAML, OAuth2, OpenID Connect and LDAP.
Experience with WAF and CDN security technologies such as Akamai or Cloudflare.

Nice-to-haves

CISSP, CCSP, GIAC, or equivalent certification.
Experience supporting customer-facing web applications or digital platforms.
Knowledge of Zero Trust and modern Identity Security architectures.
WAF, CDN, IAM, Akamai, Application Security

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

azureapipython

Platform: icims
Effort: medium