Security Engineer IT - Remote

Prime Therapeutics, LLC
Denver, United States of America
10 days ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Working hours
Regular working hours
Languages
English
Experience level
Intermediate
Compensation
$ 118K

Job location

Remote
Denver, United States of America

Tech stack

Microsoft Access
CompTIA Security+
Computer Security
Databases
Python
Password Management
Powershell
Session Manager SubSystems
Software Engineering
Software Vulnerability Management
Scripting (Bash/Python/Go/Ruby)
Cloud Platform System
Cyberark
Connectivity Problems
Firewalls (Computer Science)
Information Technology
Security Orchestration, Automation & Response

Job description

The Security Engineer is responsible for supporting, implementing, and operating privileged access management (PAM) controls that protect Prime's systems from unauthorized access, misuse, alteration, or disclosure. This role is dedicated to securing privileged identities, credentials, and sessions across Prime's applications, infrastructure, and cloud environments using CyberArk.

The engineer will perform the administration and ongoing operation of CyberArk PAM technologies, ensuring privileged access is tightly controlled, monitored, and auditable. This role partners closely with infrastructure, application teams, security, and business stakeholders to enable secure privileged access while maintaining operational stability, compliance, and a strong security posture.

Responsibilities

  • CyberArk Privileged Access Management Administration
  • Design, implement, and maintain CyberArk PAM solutions in alignment with Prime security standards and best practices.
  • Administer and support CyberArk components including:
  • Enterprise Password Vault (EPV)
  • Password Vault Web Access (PVWA)
  • Privileged Session Manager (PSM)
  • CyberArk Secure Infrastructure Access (SIA)
  • Endpoint Privilege Manager (EPM)
  • Workforce Password Management (WPM)
  • Manage CyberArk safes, platforms, and role-based access controls for human and non-human privileged accounts.
  • Configure and enforce password policies, credential rotation schedules, and session controls for privileged accounts.
  • Onboard and manage privileged accounts for servers, databases, applications, and service accounts. Privileged Access Operations & Support
  • Provide L1/L2 operational support for PAM-related incidents, including failed password rotations, access issues, and session connectivity problems.
  • Perform root-cause analysis of PAM failures and implement preventative controls to improve reliability.
  • Monitor privileged access activity and alerts to identify anomalous behavior or policy violations.
  • Produce audit evidence, compliance artifacts, and activity reports related to privileged access usage. Integration & Platform Management
  • Integrate CyberArk with target systems including operating systems, databases, applications, and directory services.
  • Support onboarding of new platforms, applications, and environments into CyberArk.
  • Perform CyberArk version upgrades, patching, and component maintenance to ensure platform stability and security.
  • Collaborate with infrastructure and application teams to design secure privileged access patterns for new and existing systems., * Contribute to PAM documentation, security standards, and operational runbooks.
  • Support privileged access lifecycle processes, including account creation, modification, review, and decommissioning.
  • Participate in security incident response activities involving privileged account compromise or misuse.
  • Support internal and external audits by providing technical explanations and evidence related to PAM controls.
  • Serve as secondary or backup support for PAM services to ensure continuity and operational resilience.
  • Identify opportunities to automate manual PAM processes and improve operational efficiency.

Requirements

  • Bachelor's degree in Information Security, Computer Science or related area of study, or equivalent combination of education and/or relevant work experience; HS diploma from an accredited school or equivalent GED required
  • 2 years of work experience in the Information Security field, or related Information Technology experience such as Server Engineering, Networking, Architecture or Application Development

Must be eligible to work in the United States without the need for work visa or residency sponsorship, * 2-4 years of experience in IT security, cybersecurity, or related technical field

  • Experience with vulnerability management, firewalls, or endpoint protection tools
  • Experience with scripting languages (e.g., Python, PowerShell) to support security automation
  • Relevant certifications (e.g., CompTIA Security+, CySA+, or equivalent) preferred

Every employee must understand, comply with and attest to the security responsibilities and security controls unique to their job, and comply with all applicable legal, regulatory, and contractual requirements and internal policies and procedures

Benefits & conditions

Potential pay for this position ranges from $74,000.00 - $118,000.00 based on experience and skills.

About the company

At Prime Therapeutics (Prime), we are a different kind of PBM, with a purpose beyond profits and a unique ability to connect care for those we serve. Looking for a purpose-driven career? Come build the future of pharmacy with us., At Prime Therapeutics (Prime), we are a different kind of PBM. We're reimagining pharmacy solutions to provide the care we would want for our loved ones. That purpose energizes our team and creates limitless opportunities to make a difference. We know that people make all the difference. If you're ready for a purpose-driven career and are passionate about simplifying health care, let's build the future of pharmacy together.

Apply for this position