Lead Identity & Application Security Engineer

• 5+ years of experience in IAM, Application Security, Web Security or related Cybersecurity Engineering roles.
• Hands-on experience with Okta, Azure AD or similar identity platforms.
• Understanding SAML, OAuth2, OpenID Connect and LDAP.
• Experience with WAF and CDN security technologies such as Akamai or Cloudflare.
• Knowledge of RBAC, MFA, PAM, and identity governance concepts.
• Familiarity with OWASP Top 10, API security and application security testing.
• Scripting or automation experience using PowerShell, Python or similar technologies.
• Strong communication and stakeholder management skills.

• CISSP, CCSP, GIAC, or equivalent certification.
• Experience supporting customer-facing web applications or digital platforms.
• Knowledge of Zero Trust and modern Identity Security architectures.

Company Description

Waters Corporation (NYSE:WAT) is a global leader in life sciences and diagnostics, dedicated to accelerating the benefits of pioneering science through analytical technologies, informatics, and service. With a focus on regulated, high-volume testing environments, our innovative portfolio harnesses deep scientific expertise across chemistry, physics, and biology. We collaborate with customers around the world to advance the release of effective, high-quality medicines, ensure the safety of food and water, and drive better patient outcomes by detecting diseases earlier, managing routine infections, and combating antibiotic resistance.

Through a shared culture of relentless innovation, our passionate team of ~16,000 colleagues turn scientific challenges into breakthroughs that improve lives worldwide.

Key Words WAF, CDN, IAM, Akamai, Application Security

• Support the design and continuous improvement of identity and access management controls.
• Manage authentication, authorization, and access governance capabilities using technologies such as Okta and Azure AD.
• Promote best practices including RBAC, MFA, PAM and least-privilege access principles.

• Implement and manage WAF policies and security controls, including bot mitigation and rule optimization.
• Support secure code reviews, penetration testing, DAST, and vulnerability assessment activities.
• Partner with engineering teams to improve secure development practices and address security risks.

• Identify, assess and track vulnerabilities, supporting remediation activities based on risk and business impact.
• Collaborate with Security Operations teams to investigate threats and strengthen detection capabilities.
• Support SIEM monitoring, log analysis, and security reporting activities.

• Provide technical guidance across Identity Security, Application Security and Digital Platform Security initiatives.