Cybersecurity Engineer - PAM (Hybrid)

Role not eligible for sponsorship. Not open to relocation.

About the Role

As a Cybersecurity Engineer, you will primarily be responsible for creating PAM (Privileged Access Management) solutions. You will develop a framework, roadmap, and program optimization, as well as work on process engineering, risk remediation, and mitigation of operational risk. In a high-velocity culture, you will introduce technology, requirements, deliverables, gaps, and systems design. You will analyze competitive strategies, cyber technologies, metrics models, and performance indicators. This role reports to the Senior Manager, Cybersecurity.

Responsibilities

• Participate in the development, integration, and testing of cyber products.
• Research, engineer, and integrate new security solutions.
• Perform Cyber Identity incident triage, determine potential impact, and identify specific vulnerabilities.
• Participate in the development and maintenance of security systems and solutions.
• Build relationships with peers throughout the company through collaborative engineering operations.
• Participate in the design and implementation of automated solutions to meet security needs.
• Demonstrate a strong understanding of Privileged Access Management (PAM) solutions.
• Collaborate with IT and business teams to identify, assess, and mitigate cybersecurity risks.
• Maintain documentation, procedures, and standards related to IAM cybersecurity operations.
• Develop system-security measures to ensure PAM cybersecurity is fully integrated.
• Manage, analyze, and respond to changing system and data access needs for the company and clients.

Requirements

• Demonstrated experience providing customer-driven solutions, support, or service.
• Basic knowledge and understanding of software engineering architecture, system/software design, and system deployment.
• Basic knowledge and understanding of Cyber Security, Cyber Engineering, Computer Science, or Software Engineering.
• Basic knowledge and understanding of security technology and application development methodology.
• Demonstrated experience performing cyber threat analysis and incident response.
• Working knowledge of penetration testing.
• Solid knowledge and understanding of directory services and identity stores.

Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field; OR minimum 5 years of professional experience in cybersecurity.
• Minimum 3 years of hands-on experience in Privileged Access Management (PAM).
• Minimum 3 years of experience in Identity and Access Management (IAM).
• Experience in network security and infrastructure management.
• Solid understanding of security frameworks, best practices, and regulatory requirements.
• Proficiency in Python and PowerShell.

Preferred Qualifications

• Professional certification such as CISSP, CISM, CompTIA Security+, or similar.
• Experience with cloud security and hybrid environments.
• Hands-on experience with identity governance, technical script writing, and automation.

Pay

Position compensation range: $80,000.00 - $131,000.00 (salary). Compensation may vary based on job level and geographic work location. Relocation support is offered for eligible candidates.

Schedule

In this hybrid role, you will be expected to work a minimum of 10 days per month out of the Madison, WI; Boston, MA; Hopkins, MN; or Englewood, CO offices. Travel requirements: up to 10%.

Benefits

• Comprehensive medical, dental, and vision benefits.
• Wellbeing benefits supporting physical, emotional, and financial health.
• Competitive 401(k) contribution and pension plan.
• Annual incentive and 9 paid holidays.
• Paid time off program (23 days accrued annually for full-time employees).
• Student loan repayment program.
• Paid-family leave.

Additional Information

• All employees participate in New Employee Orientation during their first week, held in person at Madison, WI Headquarters or a core location (may occasionally be virtual).
• Offer contingent on results of applicable background checks and signing a non-disclosure agreement for proprietary information, trade secrets, and inventions.