Senior Staff Cyber Security Engineer - PAM
About the role
At Synopsys, we drive the innovations that shape the way we live and connect. Our technology is central to the Era of Pervasive Intelligence, from self-driving cars to learning machines. We lead in chip design, verification, and IP integration, empowering the creation of high-performance silicon chips and software content. Join us to transform the future through continuous technological innovation.
You are a highly skilled and experienced Privileged Access Management (PAM) leader who is passionate about securing critical systems, identities, and privileged accounts in an increasingly complex threat landscape. You understand that identities are the new security perimeter and have extensive experience designing and operating enterprise-scale Privileged Access Management (PAM) and Identity Governance and Administration (IGA) programs. You thrive in environments where automation, scalability, and security are equally important.
Responsibilities
- Design and implement enterprise-wide Privileged Access Management strategies and roadmaps aligned with security and compliance requirements.
- Architect, deploy, and manage Privileged Access Management (PAM), Identity Governance and Administration (IGA), secrets management, and privileged session management platforms across global environments.
- Configure and optimize privileged account onboarding, credential vaulting, password rotation, session monitoring, session recording, and privileged access workflows.
- Develop automated workflows for account provisioning, deprovisioning, access certification, entitlement reviews, and privileged access governance.
- Integrate PAM and identity security platforms with enterprise directories, cloud environments, infrastructure platforms, DevOps tools, ITSM solutions, and business applications.
- Design and manage enterprise secrets management capabilities for applications, service accounts, privileged credentials, APIs, and automation platforms.
- Build scripting and automation capabilities using PowerShell, Python, REST APIs, JSON, and orchestration tools to improve operational efficiency and reduce manual effort.
- Conduct privileged access assessments, identify security gaps, and implement remediation strategies.
- Support Identity Governance initiatives, including role-based access controls, access reviews, joiner-mover-leaver processes, and segregation of duties controls.
- Partner with security operations, cloud, infrastructure, audit, compliance, and application teams to ensure effective privileged access controls.
- Lead PAM-related audits and provide evidence for SOX, ISO 27001, NIST, PCI-DSS, GDPR, and other regulatory requirements.
- Develop PAM standards, policies, procedures, technical documentation, and operational runbooks.
- Monitor platform health, performance, and security while driving continuous improvement and modernization initiatives.
The Impact You Will Have
- Safeguard Synopsys’ most sensitive data and intellectual property against advanced cyber threats and nation-state actors.
- Ensure compliance with a rapidly evolving landscape of regulations and standards, maintaining Synopsys’ status as a trusted partner.
- Mitigate systemic risks across global supply chains and minimize the potential for cascading breaches in interconnected environments.
- Leverage AI and automation to stay ahead of sophisticated attacks, driving innovation in defensive capabilities.
- Provide strategic leadership and mentorship to build a proactive, resilient cybersecurity team.
- Enable business agility by integrating security seamlessly into operations, supporting Synopsys’ continued growth and technological leadership.
Requirements
- Bachelor's degree in Information Security, Computer Science, Information Technology, or a related field.
- Minimum of 5 years of experience in Cybersecurity, Identity and Access Management (IAM), Identity Governance, or Privileged Access Management (PAM), including at least 2 years in a senior or lead engineering role.
- Hands-on experience implementing and supporting Privileged Access Management (PAM) platforms, Identity Governance and Administration (IGA) platforms, Secrets Management solutions, and Identity Lifecycle Management processes.
- Strong understanding of Zero Trust Architecture, Role-Based Access Control (RBAC), Least Privilege Principles, Segregation of Duties (SoD), and Authentication and Authorization Frameworks.
- Experience integrating identity security platforms with enterprise applications, cloud providers, security tooling, and directory services.
- Advanced scripting and automation experience using PowerShell, Python, REST APIs, and Workflow Automation Platforms.
- Experience supporting hybrid and cloud environments, including public cloud and SaaS platforms.
- Familiarity with authentication protocols and identity standards such as SAML, OAuth, OIDC, LDAP, Kerberos, and Multi-Factor Authentication (MFA).
- Strong understanding of NIST, CIS Controls, ISO 27001, Zero Trust, and identity security best practices.
- Security certifications such as CISSP, CISM, CCSP, GIAC, Microsoft Security Certifications, or vendor-specific certifications are a plus (or willingness to obtain).
Skills
- Strategic, analytical thinker with a proactive approach to problem-solving.
- Excellent communicator, able to articulate complex security concepts to both technical and non-technical audiences.
- Collaborative, inclusive leader with a passion for mentorship and team development.
- Adaptable, detail-oriented, and committed to continuous learning in a rapidly evolving threat landscape.
- Highly ethical, trustworthy, and dedicated to protecting sensitive information and organizational integrity.
The Team You’ll Be A Part Of
You will join Synopsys' Data & Identity Security Engineering team, a highly skilled group of security professionals focused on protecting the company's intellectual property, sensitive information, and critical business systems. The team is responsible for advancing enterprise data protection strategies, implementing industry-leading security technologies, and enabling secure collaboration across a global workforce. Collaboration, innovation, and a shared commitment to excellence define the team's culture. Your expertise will directly contribute to strengthening Synopsys' data security posture and supporting the company's leadership in secure technology solutions.
Benefits
We offer a comprehensive range of health, wellness, and financial benefits to cater to your needs. Our total rewards include both monetary and non-monetary offerings.