Principal Engineer – IAM​/PAM

• Serve as the principal technical architect for Privileged Access Management strategy, architecture, engineering standards, and roadmap execution across human and non-human identities.
• Provide enterprise-wide leadership for Cyber Ark Enterprise Password Vault, Privileged Session Manager, Privileged Session Monitoring, Central Policy Manager, Credential Providers, AIM, CCP, Secure Infrastructure Access, and privileged account governance capabilities.
• Lead the design and modernization of privileged access services with a focus on eliminating standing privilege, implementing just-in-time access models, reducing credential exposure, and increasing automation of privileged account lifecycle management.
• Establish enterprise architecture patterns for privileged credentials, service accounts, shared administrative accounts, secrets management, privileged sessions, application authentication, and non-human identities.
• Drive strategic integration across Cyber Ark, Hashi Corp Vault, Microsoft Entra , Service Now, Saviynt, Sphere board, cloud platforms, and enterprise identity services.
• Define target-state architecture and engineering standards for credential onboarding, password rotation, session brokering, application secrets management, credential discovery, and privileged access automation.
• Partner with Cybersecurity, Infrastructure Engineering, Cloud Engineering, Application Development, Identity Management, and Risk organizations to implement scalable privileged access controls across the enterprise.
• Provide architectural oversight for large-scale PAM transformation initiatives including platform consolidation, vault modernization, privileged session expansion, non-human identity governance, and identity hygiene programs.
• Act as the senior technical advisor to executive leadership and influence long-term PAM strategy, security architecture decisions, risk reduction priorities, and investment initiatives.
• Strategically engage with all levels of professionals and managers across the enterprise and serve as an expert advisor to leadership.
• Demonstrate proficiency in using AI‑assisted development and analysis tools (e.g., Git Hub Copilot and approved code‑centric agents).
• Leverage AI to accelerate system design, coding, testing, analysis, and troubleshooting.
• Apply strong technical judgment when validating and integrating AI‑assisted outputs into solutions.
• Understand and account for model limitations, security risks, and operational considerations.
• Apply AI responsibly in development and production environments.
• Ensure AI usage aligns with security, compliance, privacy, and ethical standards.

• 7+ years of Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education
• 7+ years of information security, identity and access management, infrastructure security, or engineering experience.
• 7+ years designing and implementing enterprise Privileged Access Management solutions.
• Deep expertise with Cyber Ark Privileged Access Security, including:
  Enterprise Password Vault, Privileged Session Manager, Central Policy Manager, Credential Providers, AIM, CCP, Privileged access and session architectures, Privileged Threat Analytics.
• Experience designing credential vaulting, password rotation, application secrets management, and privileged session monitoring solutions.
• Experience with non-human identity governance, service account management, secrets management, and credential lifecycle processes.
• Experience developing enterprise security architecture, reference architectures, standards, and engineering patterns.
• Experience influencing senior leaders, architects, engineering teams, and cross-functional stakeholders.

Demonstrates extensive expertise in Privileged Access Management (PAM) solutions, including Cyber Ark technologies, and possesses strong leadership skills to influence enterprise-wide security architecture and strategy. Proficient in integrating AI-assisted tools to enhance system design and operational efficiency while ensuring compliance with security and ethical standards.

• Cyber Ark Privileged Access Security
• Enterprise Password Vault
• Privileged Session Manager
• Identity and Access Management
• Non-Human Identity Governance

• Privileged Access Management Solutions
• Credential Vaulting
• Password Rotation
• Application Secrets Management
• Privileged Session Monitoring
• Enterprise Security Architecture
• Reference Architectures
• Engineering Patterns
• Credential Lifecycle Processes
• Privileged Threat Analytics

• Influencing Senior Leaders
• Cross-Functional Collaboration
• Strategic Engagement

• Information Security
• Infrastructure Security
• Identity Management
• Risk Reduction
• Compliance Standards

• Cyber Ark
• Hashi Corp Vault
• Microsoft Entra
• Service Now
• Saviynt
• Sphere board
• AI-Assisted Development Tools
• Git Hub Copilot