IAM Privileged Access Management Engineer

Overview

The Identity and Access Management PAM Engineer primary responsibility is for the planning, building, delivery and support of the Privileged Access Management (PAM) solution. The PAM Engineer is accountable for maturing the PAM solution and ensuring it’s secure, scalable, and reliable. In addition, the engineer will provide development, specifications and communications of the PAM program under the direction of the IAM Manager and assist in developing plans and direction for the integration of information security requirements.

The salary range for this role is $150,000 to $170,000; however, Lakeview considers several factors when extending an offer, including but not limited to, the role and associated responsibilities, a candidate’s work experience.

• Collaborate with business units and engineering teams to understand and translate their needs into technical requirements and designs for PAM systems and processes
• Serve as the Engineering Subject Matter Expert (SME) for the privileged access management (PAM) program, overseeing the Cyber Ark platform and all its components, including configuration, administration, and maintenance
• Analyze the current PAM environment to identify technical and operational opportunities and develop continuous improvement action plans
• Conduct interviews and gather relevant information from applications, services, and teams to prepare for Cyber Ark onboarding activities
• Develop and maintain end-user documentation and provide necessary training
• Work with Dev Ops, system, network, and security administrators to ensure adherence to privileged access management standards
• Create detailed architecture, standards, design, and implementation documentation
• Perform application integration assessments and provide guidance on integration options
• Address any issues or deficiencies discovered during an internal or external audit review
• Participate in disaster recovery, capacity planning, performance monitoring, and maintenance to ensure high availability
• Manage the onboarding of accounts into Cyber Ark, following a logical design framework
• Regularly review and enhance PAM policies and procedures to ensure security compliance
• Define business and functional requirements based on evolving best practices and technologies
• Collaborate with the broader cybersecurity and governance organizations to ensure compliance with policies and standards by the PAM solutions
• Develop and support security policies, standards, and processes related to PAM
• Stay updated with industry trends and emerging technologies to ensure the organization’s IAM strategy remains effective and current
• Attend vendor meetings as a local PAM technical contributor
• Contribute to the organization’s overall security by adhering to security policies and procedures

• Strong oral and written communication skills
• Ability to execute independently with limited direction
• Ability to translate security-related matters into business terms that are clear and understandable to stakeholders
• Able to navigate a demanding and high-pressure environment
• Can think strategically and incorporate business needs into technical roadmaps
• Strong problem-solving and troubleshooting skills
• Understanding of project management principles
• Ability to play secondary role for other IAM requirements

• Undergraduate degree in computer science, information systems, cybersecurity, or a related field preferred
• Experience working in the financial services industry preferred
• 8+ years in the technology field, with 4-6+ years working in the PAM domain space
• 3+ years of experience with Cyber Ark and Privileged Cloud technologies including hands-on experience with account and safe management, Cyber Ark administration and configuration, management and troubleshooting of various Cyber Ark Privileged Cloud components
• Hands-on experience with supporting application teams with vaulting SSH keys
• Experience working with IAM concepts in a hybrid cloud environment
• Cyber Ark certification a plus

The physical demands described here are representative of those that must be met by an…