> Markdown version of [/jobs/ext/3605196-security-engineer](https://www.wearedevelopers.com/jobs/ext/3605196-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security Engineer

- **Company:** Kforce Inc.
- **Location:** San Jose, CA, United States (Remote available)
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Application Programming Interfaces (APIs), Agile Methodology, Amazon Web Services, User Authentication, Build Automation, Microsoft Azure, Bash Shell, Cloud Computing, Cyber Security, Continuous Integration, Data Centers, DevOps, Disaster Recovery, Identity and Access Management, Networking Hardware, Python (Programming Language), Key Management, Linux System Administration, Network Architecture, Public Key Infrastructure, X.509, Role-Based Access Control, Reliability Engineering, Azure Active Directory, Site Reliability Engineering Practices, Zero Trust Network Access, Session Management, Security Information and Event Management, Software Engineering, Systems Integration, Network Routers, Google Cloud, Okta, Cyberark, HybridCloud, Firewalls (Computer Science), Kubernetes, Infrastructure Automation Frameworks, Information Technology, Hashicorp, TACACS+ Protocol, Terraform, Network Server, Devsecops, Docker
- **Published:** October 7, 2026
- **Apply:** https://www.dice.com/job-detail/5c29e400-03a6-4909-9dd3-4dde153e10da

## About the Role

* Bachelor's degree in Computer Science, Information Security, Engineering, or equivalent practical experience
 * 7-10 years of experience in security engineering, infrastructure security, identity security, PAM, or related disciplines
 * Strong hands-on experience implementing and operating enterprise PAM solutions in complex, large-scale production environments
 * Demonstrated ability to work across multiple engineering organizations and drive security initiatives through collaboration

Technical Skills:

 * Deep understanding of privileged account lifecycle management, credential vaulting/rotation, privileged sessions, JIT/JEA, RBAC, break-glass access, service accounts, and entitlement reviews
 * Experience with PAM platforms such as CyberArk, BeyondTrust, Delinea, HashiCorp Vault, or similar technologies
 * Strong knowledge of authentication, authorization, IAM, least privilege, Linux administration, and secure infrastructure access
 * Experience with AWS, Azure, or Google Cloud Platform; Docker/Kubernetes; Hybrid cloud/data center environments; Python/Bash; Terraform; APIs; and security integrations
 * Understanding of networking and infrastructure security, including PKI, X.509 certificates, SSH keys, cryptography, secrets management, SIEM, monitoring, and vulnerability-management tooling, * Experience in a networking company, network infrastructure organization, or large-scale distributed environment such as Cisco Meraki
 * Experience managing privileged access across large fleets of network devices, servers, Kubernetes clusters, and cloud resources
 * Experience with Microsoft Entra ID or Okta, and technologies such as TACACS+, RADIUS, SSH, or certificate-based authentication
 * Familiarity with Zero Trust, machine identity, internal security platforms, SOC 2, ISO 27001, BSI C5, Agile/DevSecOps/SRE practices, and relevant security or PAM certifications

## Description

Kforce has a client in San Jose, CA that is seeking a Senior Security Engineer., * Design, operate, and continuously improve enterprise PAM capabilities across network devices, servers, cloud resources, Kubernetes, and administrative platforms

 * Own privileged account onboarding, credential vaulting and rotation, session management, access reviews, recertification, and break-glass processes
 * Implement least-privilege, RBAC, just-in-time, and just-enough access; identify unmanaged accounts, shared credentials, and excessive permissions
 * Provide operational ownership of PAM platforms, including health, upgrades, integrations, troubleshooting, monitoring, incident support, and recovery runbooks
 * Secure administrative access to routers, switches, firewalls, appliances, servers, and other infrastructure across hybrid cloud and data center environments
 * Account for real-world operational needs including maintenance, fleet changes, disaster recovery, and production incident response
 * Build automation using Python, Bash, APIs, and Infrastructure-as-Code tools such as Terraform to reduce manual PAM operations and enforce controls consistently
 * Automate discovery, onboarding, access provisioning, entitlement validation, credential rotation, control verification, and reporting
 * Integrate PAM with identity providers, CI/CD systems, cloud platforms, Kubernetes, SIEM, monitoring, vulnerability-management, and other security tooling
 * Define appropriate boundaries and integrations between PAM, secrets management, PKI, and identity-management platforms, including secure credential distribution and rotation
 * Act as a PAM subject-matter expert and work closely with Security, SRE, Infrastructure, Networking, DevOps, Identity, and Software Engineering teams