Senior Technical Engineer (PAM Engineering)

Senior Technical Engineer (PAM Engineering)

Buffalo, NY (4 days onsite/1 day remote - mandatory, no exceptions)

12+-month contract

Web Cam Interview

NOTES FROM MANAGER / REQUIRED SKILLS & EXPERIENCE

Skill Set 1: Privileged Access & Secrets Management Engineering Expert-level experience designing, implementing,

Skill Set 2: DevOps & Automation for Security Platforms

Skill Set 3: Enterprise Infrastructure & Cloud Security Engineering

Ideal Skills and Technologies for Candidate

Privileged Access & Secrets Management Engineering

Demonstrated expert level experience designing, implementing, and operating Privileged Access Management (PAM) and Secrets Management solutions in large, regulated enterprise environments.

Strong hands-on expertise with CyberArk platforms, including credential vaulting, privileged session management, access policy enforcement, audit logging, and credential lifecycle automation.

Experience leveraging Azure Key Vault for secure storage and management of application secrets, keys, and certificates.

Proven ability to enforce least privilege, credential rotation, session monitoring, and compliance with internal risk, audit, and regulatory standards.

DevOps & Automation for Security Platforms

Proven experience integrating PAM and secrets management capabilities into DevOps and application delivery pipelines.

Strong automation skills using scripting and APIs (e.g., PowerShell, REST) to support scalable onboarding, credential rotation, access workflows, and platform integrations.

Able to partner effectively with application, cloud, and platform teams to embed security controls into modern CI/CD and cloud native architectures while minimizing friction for development teams.

Enterprise Infrastructure & Cloud Security Engineering

Strong background in hybrid enterprise infrastructure and cloud environments, including Windows and Linux systems, Active Directory and Entra ID, and Azure services.

Experience designing resilient, highly available, and secure PAM integrations across on premises and cloud platforms.

Deep understanding of authentication, authorization, logging, monitoring, and enterprise security architecture within financial services or other highly regulated environments.

Required / Preferred Technologies

CyberArk Privileged Access Management (Required)

CyberArk CDE (Cloud or DevOps Extensions) Preferred

Azure Key Vault

GitLab/ Ansible

PowerShell and REST API automation

CI/CD and DevOps tooling integration

Active Directory / Entra ID

Windows and Linux platforms

EDUCATION AND EXPERIENCE REQUIRED

Combined minimum of 12 years higher education and/ or work experience in systems design, management, and/or architecture.

Thorough understanding of the system development and infrastructure lifecycle and architecture, vendor best practices, IT Service Management, and systems design.

EDUCATION AND EXPERIENCE PREFERRED

Bachelor s degree in computer science or computer engineering.

Minimum 12 years advanced experience in a technical engineering position involving infrastructure design technologies, data management and interchange, system design and/or development for complex applications.

Ability to translate complex business and functional requirements into structured high quality implementations using any variety of industry standard approaches.

Demonstrated ability to develop alternative solutions to complex problems and recommend the best solution to the technology business, and project teams.

Advanced technical skills.

Advanced analytical skills.

Advanced troubleshooting skills.

Advanced problem solving skills.

Verifiable industry and/or vendor expertise in relative technologies.

Able to meet with clients of varying levels to gather, document, and analyze system specifications and requirements, work closely with integrators, developers, and testers in the fast-paced environment.

Ability to work independently and collaboratively with others in team environment.

Ability to use effective facilitation skills and techniques to elicit and review requirements from a diverse range of stakeholders and group size.

Understanding of how the people, processes and technology within an organization interact in relationships and patterns to create a feasible solution on projects of medium to high complexity.

Excellent written and verbal communication skills.

Possesses effective influencing skills.

Process-oriented.

Logical thinker.

Strong knowledge of server/client and virtual technologies.

Ability to master complex tasks with minimal supervision.

Experience with project estimation and budget/planning activities.

Adaptable.

Able to learn quickly in a rapid pace environment.

For the Candidate: Please provide responses for ALL of the questions below to confirm you have ALL of the required skills/experience (please be sure the information is accurate, honest, and that the resume also reflects the same skills/experience, so we re not rejected & flagged for discrepancies):

Are you currently under contract w/ an employer where you require C2C only?

If hired, can you work as a W2 employee of our company, for the contract duration (required, no exceptions)?

Do you reside in or near the Buffalo, NY area, or open to relocation out of pocket to be onsite from day 1 in a hybrid work model (4 days onsite/1 day remote - mandatory, no exceptions)?

If relocating, are you able to relocate within 2 weeks of offer acceptance?

LinkedIn profile link?

Do you possess exceptional communication skills (verbal/written)?

Skill / Category

Experience (Years)

Relevant Projects

Commentary / Highlights w/ the Skill

IT overall

Privileged Access & Secrets Management Engineering (Expert-level experience designing, implementing, etc. (required)

DevOps & Automation for Security Platforms (required)

Enterprise Infrastructure & Cloud Security Engineering (required)

Required / Preferred Technologies

CyberArk Privileged Access Management (Required)

CyberArk CDE (Cloud or DevOps Extensions) Preferred

Azure Key Vault

GitLab/ Ansible

PowerShell and REST API automation

CI/CD and DevOps tooling integration

Active Directory / Entra ID

Windows and Linux platforms

CyberArk Privileged Access Management (Required)

CyberArk CDE (Cloud or DevOps Extensions) Preferred

Azure Key Vault

GitLab/ Ansible

PowerShell and REST API automation

CI/CD and DevOps tooling integration

Active Directory / Entra ID

Windows and Linux platforms

Banking and/or Financial domains (required)