Merck is seeking an Associate Director, Cybersecurity Engineering to lead the design, implementation, and automation of security controls across enterprise cloud environments. The role works closely with Cloud, Application, DevOps, and Security teams to help deliver secure, consistent cloud deployments in a remote-friendly setup from Rahway, NJ.
Role Summary
This position focuses on building security guardrails for cloud platforms and integrating security practices into deployment workflows. You will also support cloud monitoring and threat detection, while partnering with engineering teams on practical guidance and architecture reviews.
Responsibilities
- Design and implement security controls across AWS, Azure, and/or Google Cloud Platform (GCP).
- Secure cloud identity, networking, workloads, data, containers, and APIs.
- Build security guardrails using Infrastructure as Code (IaC) and policy-as-code.
- Integrate security into CI/CD pipelines and cloud deployment processes.
- Identify and remediate cloud misconfigurations, vulnerabilities, excessive permissions, and attack paths.
- Support cloud security monitoring, logging, threat detection, and incident response.
- Partner with engineering teams to provide security guidance and participate in architecture reviews.
Required Qualifications
- Bachelor's degree required.
- Minimum 8 years of AWS, Azure, and/or GCP architecture and security experience.
- Hands-on knowledge of IAM, cloud networking, encryption, secrets management, and workload security.
- Experience with Infrastructure as Code technologies.
- Experience with Git, CI/CD, Python, PowerShell, Bash, or similar automation technologies.
- Understanding of Kubernetes and container security.
- Familiarity with cloud security platforms such as Wiz and AWS Security Hub.
- Strong troubleshooting, analytical, and communication skills.
Preferred Skills
- Experience designing security controls for large-scale or regulated enterprise environments.
- Familiarity with Zero Trust, CIS Benchmarks, NIST, DevSecOps, and cloud security architecture principles.
- Relevant cloud or security certifications are a plus.
Technologies
AWS, Azure, Google Cloud Platform (GCP), IAM, Infrastructure as Code (IaC), policy-as-code, CI/CD, Git, Python, PowerShell, Bash, Kubernetes, Wiz, AWS Security Hub
Compensation and Location
Location: Rahway, NJ, USA (remote). Primary location for this posting is USA - New Jersey - Rahway.
Salary range (primary location): USD 142,400 - 224,100 per year.
Benefits
- Medical, dental, vision healthcare, and other insurance benefits (for employee and family)
- Retirement benefits, including 401(k)
- Paid holidays
- Vacation
- Compassionate and sick days
- Annual bonus and long-term incentive, if applicable
Additional Employment Information
- Employee status: Regular
- Relocation: No relocation
- VISA sponsorship: No
- Travel requirements: 10%
- Flexible work arrangements: Remote
- Shift: 1st - Day
- Valid driving license: No
- Hazardous materials: N/A
Equal Opportunity and Fair Chance Notices
- San Francisco Residents Only: Qualified applicants with arrest and conviction records may be considered in compliance with the San Francisco Fair Chance Ordinance.
- Los Angeles Residents Only: Qualified applicants will be considered for employment, including those with criminal histories, consistent with the requirements of applicable state and local laws, including the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance.
Requisition and Posting Details
- Requisition ID: R425713
- Job posting end date: 11/11/2026 (effective until 11:59:59PM on the day before the listed end date)
