Privileged Access Engineer

Security Engineer

The Privileged Access Engineer works under the Director of Privileged Access Engineering to plan, conduct and establish a functional vision for PAM assignments. The Engineer possesses extensive knowledge related to Privileged Access and is primarily responsible for delivery and buildout of a Privileged Access ecosystem under the Director's direction along with other team members.

The Engineer must be able to interpret technical architectural designs and provide further engineering definitions. He/she must have infrastructure engineering knowledge along with PAM application configuration expertise. The Engineer should have application development experience including coding, scripting and working within the SDLC. He/she will possess and apply comprehensive knowledge of privileged access security controls to the completion of complex assignments. Responsibilities and impact may crossover to other job groups and functions within the Identity and Access Management umbrella. The ability to effectively communicate the work required at each step of the process is key, as is the ability to clearly and concisely SWOT issues and decision points. The candidate possesses the ability to effectively communicate successes and failures of a model, processes and procedures with clear understanding of critical success.

This role exists to serve as the internal Privileged Access liaison to user groups and teams. Activities include:

• Installation and Support of CyberArk CorePAS, OPM, EPM, AAM, Conjur (on-prem and SaaS)
• Worked with other PAM tools such as Centrify, Beyond trust, Redhat IDM
• Experience in infrastructure technology Windows, Linux, Mainframe servers, Databases, Network, Storage
• Experience with Active Directory, and other IAM tooling Sailpoint, OIM
• Experience with Authentication tools and protocols SAML, Radius
• Working with architecture to define requirements for the build of PAM tools and systems
• Working with infrastructure teams to detail requirements for engineering specifications
• Develop engineering specifications for the purpose of configuring tools and systems
• Install and configure of PAM tools and system applications
• Work within ITIL the controls for service management
• Document runbooks
• Training support engineers and users
• Follow SDLC workflow
• Manage and work within an agile/Scrum team

The Engineer must be in tune with the overall Privileged Access Program direction of the organization and should have a strong understanding of the overall organization's structure and how the various internal customer rely on Privileged Access as a service.

Basic Qualifications for Consideration:

• Bachelor's degree or equivalent industry experience
• 8+ years of experience in IAM, PAM Engineering
• Experience with privileged access controls from a user experience perspective
• Must be US Citizen (no GCH)

Preferred Skills, Experience, and Education:

• Cybersecurity certifications such as CISA, CISSP
• Ability to interface with Corporate Audit and External Audit functions for regulatory compliance
• Worked on automation of repeatable tasks
• Scripting experience (powershell/shell/python)
• Working with Cyberark APIs