Staff/Lead Security Engineer - PAM

The primary responsibility of the Staff/Lead Security Engineer position will be the continued evolution and advancement of our Privileged Account Management (PAM) program. This includes improvements in both infrastructure, such as driving the adoption of CyberArk/Idira ISPSS and Privileged Cloud, and working to identify opportunities to increase compliance with our standards through better management and usage of our account inventory. This is a multifaceted position that requires engineering, support and project leadership abilities.

Additionally, the position will be involved in the support of other IAM-related technologies such as directory services, federation, multifactor authentication (MFA), identity lifecycle management, and identity visibility and intelligence. As this space is constantly evolving, a passion for technology and a strong focus on continued learning will be key to success.

Position Responsibilities:

• Lead the design, implementation, and support of highly automated and reliable PAM solutions

• Identify gaps in existing PAM coverage, design solutions and lead remediation efforts

• Research emerging trends and tools and perform product evaluations

• Produce and contribute to roadmaps and project plans for PAM or larger IAM efforts

• Provide advanced incident troubleshooting and participate in on-call rotation and disaster recovery tests

• Proactively identify and automate existing manual tasks

• Develop processes, guidelines and documentation for consumption by internal teams

• Assist teams in identifying, properly storing and using their credentials

• Provide guidance and mentorship for junior staff

Minimum Requirements: Knowledge, skills, and abilities:

• 7+ years of proven experience with CyberArk/Idira

• Hands-on experience designing, deploying and supporting large-scale CyberArk/Idira implementations

• Strong familiarity with one or more of the following IAM areas:

• Directory services

• Identity lifecycle management

• Federation / MFA

• Identity Visibility and Intelligence

• Expertise in both Windows and Linux environments

• Familiarity or expertise in cloud technologies and platforms a plus

• Ability to create scripts in either PowerShell or Python

• Familiarity with devops, containerized workloads and associated tooling and technologies a plus

• Strong familiarity with security issues surrounding Identity and Access Management and experience in implementation of security systems and controls