Senior Technical Engineer (PAM Engineering)

Senior Technical Engineer (PAM Engineering)

Buffalo, NY (4 days onsite/1 day remote - mandatory, no exceptions)

12+-month contract

Web Cam Interview

NOTES FROM MANAGER / REQUIRED SKILLS & EXPERIENCE:

• Skill Set 1: Privileged Access & Secrets Management Engineering Expert-level experience designing, implementing,
• Skill Set 2: DevOps & Automation for Security Platforms
• Skill Set 3: Enterprise Infrastructure & Cloud Security Engineering

Ideal Skills and Technologies for Candidate

Privileged Access & Secrets Management Engineering

• Demonstrated expert level experience designing, implementing, and operating Privileged Access Management (PAM) and Secrets Management solutions in large, regulated enterprise environments.
• Strong hands-on expertise with CyberArk platforms, including credential vaulting, privileged session management, access policy enforcement, audit logging, and credential lifecycle automation.
• Experience leveraging Azure Key Vault for secure storage and management of application secrets, keys, and certificates.
• Proven ability to enforce least privilege, credential rotation, session monitoring, and compliance with internal risk, audit, and regulatory standards.

DevOps & Automation for Security Platforms

• Proven experience integrating PAM and secrets management capabilities into DevOps and application delivery pipelines.
• Strong automation skills using scripting and APIs (e.g., PowerShell, REST) to support scalable onboarding, credential rotation, access workflows, and platform integrations.
• Able to partner effectively with application, cloud, and platform teams to embed security controls into modern CI/CD and cloud native architectures while minimizing friction for development teams.

Enterprise Infrastructure & Cloud Security Engineering

• Strong background in hybrid enterprise infrastructure and cloud environments, including Windows and Linux systems, Active Directory and Entra ID, and Azure services.
• Experience designing resilient, highly available, and secure PAM integrations across on premises and cloud platforms.
• Deep understanding of authentication, authorization, logging, monitoring, and enterprise security architecture within financial services or other highly regulated environments.

Required / Preferred Technologies:

• CyberArk Privileged Access Management (Required)
• CyberArk CDE (Cloud or DevOps Extensions) Preferred
• Azure Key Vault
• GitLab/ Ansible
• PowerShell and REST API automation
• CI/CD and DevOps tooling integration
• Active Directory / Entra ID
• Windows and Linux platforms

EDUCATION AND EXPERIENCE REQUIRED:

• Combined minimum of 12 years higher education and/ or work experience in systems design, management, and/or architecture.
• Thorough understanding of the system development and infrastructure lifecycle and architecture, vendor best practices, IT Service Management, and systems design.

EDUCATION AND EXPERIENCE PREFERRED:

• Bachelor s degree in computer science or computer engineering.
• Minimum 12 years advanced experience in a technical engineering position involving infrastructure design technologies, data management and interchange, system design and/or development for complex applications.
• Ability to translate complex business and functional requirements into structured high quality implementations using any variety of industry standard approaches.
• Demonstrated ability to develop alternative solutions to complex problems and recommend the best solution to the technology business, and project teams.
• Advanced technical skills.
• Advanced analytical skills.
• Advanced troubleshooting skills.
• Advanced problem solving skills.
• Verifiable industry and/or vendor expertise in relative technologies.
• Able to meet with clients of varying levels to gather, document, and analyze system specifications and requirements, work closely with integrators, developers, and testers in the fast-paced environment.
• Ability to work independently and collaboratively with others in team environment.
• Ability to use effective facilitation skills and techniques to elicit and review requirements from a diverse range of stakeholders and group size.
• Understanding of how the people, processes and technology within an organization interact in relationships and patterns to create a feasible solution on projects of medium to high complexity.
• Excellent written and verbal communication skills.
• Possesses effective influencing skills.
• Process-oriented.
• Logical thinker.
• Strong knowledge of server/client and virtual technologies.
• Ability to master complex tasks with minimal supervision.
• Experience with project estimation and budget/planning activities.
• Adaptable.
• Able to learn quickly in a rapid pace environment.

For the Candidate: Please provide responses for ALL of the questions below to confirm you have ALL of the required skills/experience (please be sure the information is accurate, honest, and that the resume also reflects the same skills/experience, so we re not rejected & flagged for discrepancies):

• Are you currently under contract w/ an employer where you require C2C only?
• If hired, can you work as a W2 employee of our company, for the contract duration (required, no exceptions)?
• Do you reside in or near the Buffalo, NY area, or open to relocation out of pocket to be onsite from day 1 in a hybrid work model (4 days onsite/1 day remote - mandatory, no exceptions)?
• If relocating, are you able to relocate within 2 weeks of offer acceptance?
• LinkedIn profile link?
• Do you possess exceptional communication skills (verbal/written)?

Skill / Category

Experience (Years)

Relevant Projects

Commentary / Highlights w/ the Skill

IT overall

Privileged Access & Secrets Management Engineering (Expert-level experience designing, implementing, etc. (required)

DevOps & Automation for Security Platforms (required)

Enterprise Infrastructure & Cloud Security Engineering (required)

Required / Preferred Technologies:

• CyberArk Privileged Access Management (Required)
• CyberArk CDE (Cloud or DevOps Extensions) Preferred
• Azure Key Vault
• GitLab/ Ansible
• PowerShell and REST API automation
• CI/CD and DevOps tooling integration
• Active Directory / Entra ID
• Windows and Linux platforms

• CyberArk Privileged Access Management (Required):
• CyberArk CDE (Cloud or DevOps Extensions) Preferred:
• Azure Key Vault:
• GitLab/ Ansible:
• PowerShell and REST API automation:
• CI/CD and DevOps tooling integration:
• Active Directory / Entra ID:
• Windows and Linux platforms:

Banking and/or Financial domains (required)