Cybersecurity Engineer Level 4 - PAM

Description

JOB TITLE: Cybersecurity Engineer Level 4
SALARY RANGE: $105,843 - $143,948
DEPT/DIV: Information Technology Supervisor
CybSecOffMgr AccesMgmtIdentSec
LOCATION: 2 Broadway, New York, NY 10004
HOURS OF WORK: 9:00 am - 5:30 pm (7.5 hours/day) or as required
ELIGIBLE FOR TELEWORK: Yes
OPENING DATE: Effective date of hire + 30 days

About the role

The purpose of this position is to provide technical expertise in managing and analyzing cybersecurity risks. Cybersecurity Engineer will be responsible for designing, building, and maintaining infrastructure and applications technology to support a secure cybersecurity posture.

Responsibilities

• Researching emerging threats and vulnerabilities to aid in the identification of network incidents, and supporting the creation of new architecture, policies, standards, and guidance to address them
• Designing, configuring, and integrating secure solutions in the technology domains assigned
• Providing incident response support, including mitigating actions to contain activity and facilitating forensic analysis, system hardening, and recovery when necessary
• Installing, system configuration, hardening, and optimization for infrastructure, application, and security components and systems such as servers, workstations, mobile devices, directory services, operating systems, middleware, IOT, web and next-generation firewalls, machine and human behavior learning tools, host-based security system, security event and incident monitoring systems, virtual, physical, and cloud platforms
• Identifying configuration gaps independently and/or with vendors to reduce cybersecurity risks
• Reviewing alerts and data from sensors and documenting formal, technical incident reports
• Performing other duties as assigned

Qualifications

• Bachelor’s Degree in Arts/Sciences (BA/BS) and minimum 3 years of relevant experience required
• Bachelor’s Degree in Arts/Sciences (BA/BS) in Computer Science or related fields preferred
• Certified in Oracle Cloud Infrastructure
• At least one certification in technology subdomains preferred upon hire but not required (ie., Cloud, Applications, Infrastructure, Security Technology, etc.)
• Current CISSP or other advanced security-related certification preferred upon hire but not required

Specialized Skills

• Hands-on PAM platform engineering: privileged account vaulting, session management, credential rotation, and access request workflow configuration
• Privileged Identity Management (PIM) and Just-in-Time (JIT) access design and implementation, including approval workflows and time-bound elevation
• Tiered administration models (Tier 0–5): designing and enforcing privileged access controls, admin account separation, and secure administrative paths
• Knowledge of service account and non-human identity security: discovery, vaulting, rotation, and remediation coordination
• Strong experience with endpoint privilege management: least-privilege enforcement, elevation controls, and local admin removal
• Integration of PAM with directory, MFA, SSO, and ITSM platforms

Competencies

• Communicates Effectively
• Values Diversity
• Collaborates
• Cultivates Innovation
• Customer Focus
• Tech Savvy

Equal Employment Opportunity

The MTA is an Equal Opportunity Employer and encourages qualified applicants from diverse backgrounds, experiences, and abilities, including military service members, to apply.