Staff/Lead Security Engineer - PAM

About the Role

The primary responsibility of this position is the continued evolution and advancement of our Privileged Account Management (PAM) program. This includes improvements in both infrastructure—such as driving the adoption of CyberArk/Idira ISPSS and Privileged Cloud—and identifying opportunities to increase compliance with our standards through better management and usage of our account inventory. This multifaceted role requires engineering, support, and project leadership abilities.

Additionally, the position will support other IAM-related technologies, including directory services, federation, multifactor authentication (MFA), identity lifecycle management, and identity visibility and intelligence. A passion for technology and a strong focus on continued learning are key to success in this constantly evolving space.

Responsibilities

• Lead the design, implementation, and support of highly automated and reliable PAM solutions
• Identify gaps in existing PAM coverage, design solutions, and lead remediation efforts
• Research emerging trends and tools and perform product evaluations
• Produce and contribute to roadmaps and project plans for PAM or larger IAM efforts
• Provide advanced incident troubleshooting and participate in on-call rotation and disaster recovery tests
• Proactively identify and automate existing manual tasks
• Develop processes, guidelines, and documentation for consumption by internal teams
• Assist teams in identifying, properly storing, and using their credentials
• Provide guidance and mentorship for junior staff

Requirements

• 7+ years of proven experience with CyberArk/Idira
• Hands-on experience designing, deploying, and supporting large-scale CyberArk/Idira implementations
• Strong familiarity with one or more of the following IAM areas:
  • Directory services
  • Identity lifecycle management
  • Federation / MFA
  • Identity Visibility and Intelligence
• Expertise in both Windows and Linux environments
• Familiarity or expertise in cloud technologies and platforms (a plus)
• Ability to create scripts in either PowerShell or Python
• Familiarity with DevOps, containerized workloads, and associated tooling and technologies (a plus)
• Strong familiarity with security issues surrounding Identity and Access Management and experience in implementation of security systems and controls
• Thorough knowledge of information security components, principles, practices, and procedures
• Demonstrated ability to work across a broad range of technologies
• Ability to succinctly articulate complex technical issues to both technicians and business sponsors
• Knowledge of audit controls and applicability to IAM services architecture, design, and processes
• Experience working in an Agile/Scrum and the Product Operating Model

Qualifications

• A Bachelor's or Master's degree in Computer Science or Information Systems or equivalent combination of education and related work experience
• CyberArk/Idira certifications or equivalent experience (a plus)
• GCP or similar cloud certifications (a plus)
• Security certifications: CISSP or equivalent (a plus)

Skills

• Strong analytical, problem-solving, and troubleshooting skills
• High-level critical thinking skills
• Excellent written and oral communication skills
• Ability to compose and present material that communicates difficult concepts
• Positive attitude, self-starter with strong communication and interpersonal skills to lead working groups, negotiate, and create consensus
• Comfortable working in a dynamic environment with multiple goals
• Highly self-motivated and directed, with keen attention to detail
• Able to prioritize and execute tasks in a high-pressure environment
• Ability to deal diplomatically and effectively at all levels of the organization, including both technical and non-technical, management, and senior leadership

Pay

The pay range for this role is $132,100–$220,100. Actual salary offered will depend on factors including relevant experience, skills, education, and internal equity.

Benefits

• Annual target bonus opportunity
• Broad-based equity program (opportunity to become an owner in the company)
• Comprehensive health coverage
• Retirement package including both a 401(k) and an active pension plan
• Highly competitive education reimbursement provisions
• Paid time off
• Mental health benefit