PAM Engineer

Lighthouse Technology Services is partnering with our client to fill their PAM Engineer position! This is a 12-18 month contract opportunity and will be hybrid in Buffalo, NY. We are open to remote candidates who have their CDE Certification.

This role will be a W2 employee of Lighthouse Technology Services. No C2C or subcontracting arrangements will be considered.

What You’ll Be Doing:

• Design, implement, and operate Privileged Access Management and Secrets Management solutions within a large, regulated enterprise environment
• Develop and deploy new use cases for CyberArk platforms, including credential vaulting, privileged session management, and access policy enforcement
• Integrate PAM and secrets management capabilities into DevOps pipelines and application delivery workflows using automation and APIs
• Partner with application, cloud, and platform teams to embed security controls into CI/CD and cloud-native architectures
• Build and maintain scalable automation for credential rotation, access workflows, platform integrations, and user onboarding using PowerShell and REST APIs
• Collaborate in an Agile environment with three weekly standups, weekly engineering calls, and three-week sprint cycles
• Manage and resolve tickets independently through Incident and Service Management systems, responding to BAU requests
• Ensure compliance with least privilege principles, session monitoring requirements, and internal risk, audit, and regulatory standards
• Leverage Azure Key Vault for secure storage and lifecycle management of application secrets, keys, and certificates
• Design resilient, highly available PAM integrations across hybrid on-premises and cloud platforms

• 10+ years of hands-on experience with CyberArk Privileged Access Management in large, regulated enterprise environments
• Strong DevOps and automation engineering background with ability to integrate security platforms into modern development workflows
• Proven experience with Azure Key Vault, GitLab, Ansible, PowerShell scripting, and REST API automation
• Deep expertise in hybrid infrastructure environments including Windows and Linux systems, Active Directory, and Entra ID
• Demonstrated ability to work with change and incident management tools in large enterprise settings within regulated industries
• Developer or engineering background with CI/CD tooling integration experience rather than traditional systems administration
• Ability to hit the ground running, work independently after onboarding, and contribute immediately by resolving tickets within the first sprint cycle
• Strong collaboration skills with ability to partner effectively across cross-functional teams while minimizing friction for development teams
• CyberArk CDE (Cloud or DevOps Extensions) certification highly preferred