Lead Privileged Access Management (PAM) Engineer

SOLU TECHNOLOGY PARTNERS
Buffalo, United States of America
3 days ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Working hours
Regular working hours
Languages
English
Experience level
Senior
Compensation
$ 194K

Job location

Buffalo, United States of America

Tech stack

Microsoft Access
Microsoft Windows
Microsoft Active Directory
User Authentication
Azure
Cloud Computing
Continuous Integration
Linux
DevOps
Key Management
Microsoft Security Essentials
Powershell
Ansible
Systems Integration
Cyberark
Delivery Pipeline
Gitlab
REST

Job description

Solu is seeking a Lead Privileged Access Management (PAM) Engineer to design, implement, and support enterprise PAM and Secrets Management solutions in a highly regulated environment. This role focuses on CyberArk administration, Azure Key Vault, automation, and integrating privileged access controls into enterprise infrastructure and DevOps pipelines., * Design, implement, and support CyberArk PAM solutions.

  • Manage credential vaulting, privileged sessions, credential rotation, and access policies.
  • Administer Azure Key Vault for secrets, keys, and certificates.
  • Automate onboarding, credential management, and integrations using PowerShell and REST APIs.
  • Integrate PAM into CI/CD pipelines and DevOps workflows.
  • Support Active Directory, Entra ID, Windows, Linux, and Azure environments.
  • Monitor privileged access, ensure compliance, and troubleshoot security platform issues.

Requirements

  • 5+ years of experience with enterprise Privileged Access Management.
  • Strong hands-on experience with CyberArk PAM.
  • Experience with Azure Key Vault.
  • PowerShell and REST API automation experience.
  • Experience integrating security into CI/CD and DevOps pipelines.
  • Knowledge of Active Directory, Entra ID, Windows, Linux, and Azure.
  • Understanding of privileged access, authentication, authorization, and security best practices.

Preferred Qualifications

  • CyberArk Cloud or DevOps Extensions (CDE).
  • GitLab and Ansible experience.
  • Experience in financial services or other regulated industries.
  • CyberArk or Microsoft security certifications are a plus.

Technical Stack

  • PAM: CyberArk PAM, CyberArk CDE (Preferred)
  • Secrets Management: Azure Key Vault
  • Automation: PowerShell, REST APIs
  • DevOps: GitLab, Ansible, CI/CD
  • Identity: Active Directory, Entra ID
  • Platforms: Windows, Linux, Microsoft Azure

Benefits & conditions

4.64.6 out of 5 stars Buffalo, NY 14203 $194,000 a year

Apply for this position