Lead Security Engineer (Privileged Access Management )
Core
Lead the design, implementation, and operation of enterprise Privileged Access Management (PAM) solutions to secure privileged access across on-premises, SaaS, and multi-cloud environments.
Role type
Senior IC Lead Security Engineer (Privileged Access Management)
Builds
Enterprise vaults, secrets management, privileged session management, Zero Standing Privileges (ZSP) workflows, and automation integrations.
Domain
Cybersecurity, Identity and Access Management (IAM), Cloud Security
Required skills
Enterprise PAM platforms (CyberArk), Zero Standing Privilege (ZSP), Just-in-Time (JIT), Cloud IAM (AWS, Azure, GCP), Python/PowerShell scripting, Infrastructure as Code (IaC), IAM services (LDAP, Active Directory, SSO), PKI fundamentals, DevOps practices
Preferred skills
AI Agent Identity security, Non-human identity security, Machine identity frameworks (SPIFFE/SPIRE), Zero Trust concepts, Security certifications (CISSP, CCSP, Azure/AWS Security)
Technologies
CyberArk, AWS, Azure, GCP, Python, PowerShell, LDAP, Active Directory, SPIFFE, SPIRE
Responsibilities
Provide technical leadership for IAM PAM engineering function; Engage with technology leaders and stakeholders to drive secure solutions; Lead design and operationalization of PAM solutions; Develop and oversee automation and integrations; Troubleshoot complex PAM issues; Analyze privileged access use cases and develop governance frameworks; Mentor and develop engineers; Ensure reliability of mission-critical IAM systems; Define and track PAM metrics.
Seniority
Senior, hands-on IC with leadership responsibilities