> Markdown version of [/jobs/ext/2077628-pam-engineer](https://www.wearedevelopers.com/jobs/ext/2077628-pam-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # PAM Engineer - **Company:** Propertyvalue Lighthouse Technology Services - **Location:** Buffalo, NY, United States - **Experience:** Expert - **Salary:** $187,200.0 - $208,000.0 - **Contract:** Temporary contract - **Skills:** Microsoft Windows, Active Directory, Application Programming Interfaces (APIs), Agile Methodology, Cloud Computing, Cloud Engineering, Continuous Integration, Linux, DevOps, Key Management, Windows PowerShell, Ansible, Session Management, Cyberark, Delivery Pipeline, Gitlab, Enterprise Integration, Restful APIs - **Published:** August 16, 2026 - **Apply:** https://www.dice.com/job-detail/cfc2d8a3-1924-4786-ba37-10333be55def ## About the Role * 10+ years of hands-on experience with CyberArk Privileged Access Management in large, regulated enterprise environments * Strong DevOps and automation engineering background with ability to integrate security platforms into modern development workflows * Proven experience with Azure Key Vault, GitLab, Ansible, PowerShell scripting, and REST API automation * Deep expertise in hybrid infrastructure environments including Windows and Linux systems, Active Directory, and Entra ID * Demonstrated ability to work with change and incident management tools in large enterprise settings within regulated industries * Developer or engineering background with CI/CD tooling integration experience rather than traditional systems administration * Ability to hit the ground running, work independently after onboarding, and contribute immediately by resolving tickets within the first sprint cycle * Strong collaboration skills with ability to partner effectively across cross-functional teams while minimizing friction for development teams * CyberArk CDE (Cloud or DevOps Extensions) certification highly preferred ## Description Lighthouse Technology Services is partnering with our client to fill their PAM Engineer position! This is a 12-18 month contract opportunity and will be hybrid in Buffalo, NY. We are open to remote candidates who have their CDE Certification. This role will be a W2 employee of Lighthouse Technology Services. No C2C or subcontracting arrangements will be considered. What You'll Be Doing: * Design, implement, and operate Privileged Access Management and Secrets Management solutions within a large, regulated enterprise environment * Develop and deploy new use cases for CyberArk platforms, including credential vaulting, privileged session management, and access policy enforcement * Integrate PAM and secrets management capabilities into DevOps pipelines and application delivery workflows using automation and APIs * Partner with application, cloud, and platform teams to embed security controls into CI/CD and cloud-native architectures * Build and maintain scalable automation for credential rotation, access workflows, platform integrations, and user onboarding using PowerShell and REST APIs * Collaborate in an Agile environment with three weekly standups, weekly engineering calls, and three-week sprint cycles * Manage and resolve tickets independently through Incident and Service Management systems, responding to BAU requests * Ensure compliance with least privilege principles, session monitoring requirements, and internal risk, audit, and regulatory standards * Leverage Azure Key Vault for secure storage and lifecycle management of application secrets, keys, and certificates * Design resilient, highly available PAM integrations across hybrid on-premises and cloud platforms ## Related Videos - [WeAreDevelopers LIVE - Modern DevOps for IoT Devices and More](https://www.wearedevelopers.com/videos/1805-wearedevelopers-live-modern-devops-for-iot-devices-and-more) - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [From DevOps to Scaled DevOps: How We’re Rebuilding Continuous Delivery as a Platform](https://www.wearedevelopers.com/videos/100018-from-devops-to-scaled-devops-how-we-re-rebuilding-continuous-delivery-as-a-platform) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [Enabling automated 1-click customer deployments with built-in quality and security](https://www.wearedevelopers.com/videos/83-enabling-automated-1-click-customer-deployments-with-built-in-quality-and-security) - [#90DaysOfDevOps - The DevOps Learning Journey](https://www.wearedevelopers.com/videos/548-90daysofdevops-the-devops-learning-journey) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline) - [Dev Digest 132 - Binging WADFlix?](https://www.wearedevelopers.com/magazine/473-dev-digest-132-binging-wadflix) - [Dev Digest 162: AI careers, MCP, AWS best practices & floppy sweaters](https://www.wearedevelopers.com/magazine/571-dev-digest-162-ai-careers-mcp-aws-best-practices-floppy-sweaters)