Cyber Security Engineer

Position Summary

We are seeking a highly skilled Cybersecurity Engineer with expertise in Privileged Access Management (PAM) and Secrets Management to design, implement, and support enterprise security solutions that protect privileged accounts, credentials, and sensitive secrets across hybrid cloud environments. This role will partner with infrastructure, cloud, DevOps, and application teams to integrate security controls into enterprise platforms while ensuring compliance with regulatory, audit, and internal security requirements.

Key Responsibilities

Privileged Access Management & Secrets Management

• Design, implement, administer, and optimize enterprise Privileged Access Management (PAM) solutions.
• Manage privileged credential vaulting, privileged session management, access policy enforcement, credential rotation, and audit logging.
• Implement and support secrets management solutions using Azure Key Vault for secure storage and lifecycle management of application secrets, certificates, and encryption keys.
• Develop and maintain privileged access controls that enforce least privilege, just-in-time access, credential rotation, and privileged session monitoring.
• Ensure PAM solutions meet organizational security, compliance, audit, and regulatory standards.

Security Engineering & Automation

• Integrate PAM and secrets management capabilities into CI/CD pipelines and modern DevOps workflows.
• Develop automation using PowerShell, REST APIs, and other scripting technologies to streamline onboarding, credential management, provisioning, and lifecycle operations.
• Create reusable automation for privileged account onboarding, password rotation, access workflows, and platform integrations.
• Collaborate with DevOps, cloud, and application development teams to embed security controls into cloud-native and enterprise application environments.

Infrastructure & Cloud Security

• Design and support secure PAM integrations across hybrid infrastructure, including Windows, Linux, Active Directory, Entra ID, and Microsoft Azure.
• Support highly available, resilient, and scalable PAM platform architecture.
• Implement authentication, authorization, logging, monitoring, and security controls across enterprise environments.
• Troubleshoot complex infrastructure, identity, and privileged access issues while maintaining operational excellence.

Collaboration & Governance

• Partner with infrastructure, identity, cloud, application, and security teams to improve privileged access security.
• Participate in security architecture reviews and recommend improvements to privileged access controls.
• Support internal and external audits by providing documentation, reporting, and evidence of security controls.
• Develop operational procedures, standards, and technical documentation for PAM services.

Required Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or equivalent professional experience.
• Demonstrated expert-level experience designing, implementing, and supporting Privileged Access Management (PAM) and Secrets Management solutions within large enterprise environments.
• Strong hands-on experience with CyberArk Privileged Access Management, including:
• Credential Vaulting
• Privileged Session Management
• Access Policy Management
• Credential Lifecycle Automation
• Audit Logging
• Experience implementing and administering Azure Key Vault.
• Experience automating security processes using PowerShell and REST APIs.
• Strong understanding of least privilege, privileged identity security, credential rotation, and privileged access governance.
• Experience supporting Windows and Linux server environments.
• Strong knowledge of Active Directory and Microsoft Entra ID.
• Experience integrating security controls into DevOps and CI/CD pipelines.
• Excellent analytical, troubleshooting, communication, and collaboration skills.

Preferred Qualifications

• Experience with CyberArk Cloud or DevOps Extensions (CDE).
• Experience with GitLab and Ansible.
• Experience integrating PAM solutions with cloud-native applications and infrastructure.
• Experience supporting highly regulated environments such as financial services, healthcare, or government.
• Knowledge of enterprise authentication, authorization, logging, monitoring, and security architecture best practices.
• Industry certifications such as CyberArk Defender/Sentry, Microsoft Azure Security, CISSP, Security+, or related certifications are preferred.