Senior Security Engineer - PAM

Your opportunityAt Schwab, you are empowered to make an impact on your career. Here, innovative thought meets creative problem solving, helping us “challenge the status quo” and transform the finance industry together.In Schwab Cybersecurity Services (SCS), Office of CISO, we provide platforms, services, and security operations capabilities which enable the firm to produce successful client and shareholder outcomes securely and safely. Securing our IT assets, data, and access to applications is the core of who we are and what we do. We ensure only the appropriate entities have access to IT resources and that we adhere to best practices and standards to ensure a safe and compliant environment is maintained.Identity and Access Management (IAM) has an opening for a Sr. Security Developer, to deliver and manage large, complex Identity and Access Management programs in Privileged Access Management (PAM). The individual will ensure adherence to policy and provide leadership to the implementation of leading-edge technology to position the organization for success – improving efficiency, increasing security posture, and supporting growth of the firm’s Identity and Access Management Program.If you are looking for work and life balance, a great team culture, passionate about the IAM area, specifically PAM and enjoy the below, this role is for you.• Work as a PAM engineer for One Identity suite of products for the IAM team to build, execute & deploy account and session management solution• Duties include customer consultation and providing guidance and direction to consumers and support teams• Build the technical as-is and to-be process documents.• Review polices standards, guidelines, and procedures.• Work with SOX/PCI audit group, support audit activities.• Work closely with IAM Engineering to deliver the proposed solutions and provide strategic technical direction across the team• Work closely with peer groups to achieve Organizational objectives• Overall accountability for technical document delivery, technical support, and hands on technical work• Oversee adherence to applicable Security Controls, Policies and Standards; partner with business owners and technology groups to synchronize plans to remediate gaps• Contribute to secrets infrastructure design, including provisioning, distribution, scaling access policies, SSH key management, API key management, and reporting.• Design, configure, and maintain secrets solutions for storage, machine auth, infrastructure components, cloud native product, applications, databases, cloud services (SaaS).• Strong knowledge of Agile Scrum principles and practices• Ability to lead and facilitate Scrum ceremoniesWhat you haveRequired:• Bachelor’s degree or equivalent experience• 7+ years’ experience in Information Security field, Information Technology field• 4+ years of direct experience working within One Identity Suite of products OR Privileged Access Management technologies on major projects or activities like upgrades, migration, enhancements, customizations, security remediations, etc., on One Identity Safeguard• 4+ years’ experience in Java, J2EE, Python, Perl Scripts or any other programing language developing Rest API'sPreferred:• Certification in Agile methodologies, like Certified Scrum Master (CSM) or Professional Scrum Master (PSM).• SAFe certification and Kanban certification are a plus.• CISSP, CISM, or equivalent certification is preferredWhat’s in it for youAt Schwab, we’re committed to empowering our employees’ personal and professional success. Our purpose-driven, supportive culture, and focus on your development means you’ll get the tools you need to make a positive difference in the finance industry. Our Hybrid Work and Flexibility approach balances our ongoing commitment to workplace flexibility, serving our clients, and our strong belief in the value of being together in person on a regular basis.We offer a competitive benefits package that takes care of the whole you – both today and in the future:• 401(k) with company match and Employee stock purchase plan• Paid time for vacation, volunteering, and 28-day sabbatical after every 5 years of service for eligible positions• Paid parental leave and family building benefits• Tuition reimbursement• Health, dental, and vision insurance