> Markdown version of [/jobs/ext/4451678-information-security-engineer-6](https://www.wearedevelopers.com/jobs/ext/4451678-information-security-engineer-6). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information Security Engineer 6 - **Company:** Lam Research Corporation - **Location:** Fremont, CA, United States (Remote available) - **Experience:** Expert - **Salary:** $137,000.0 - $287,000.0 - **Contract:** Permanent contract - **Skills:** Cloud Computing, Cloud Computing Security, Cyber Security, Information Systems, Computer Engineering, Data Security, DevOps, Disaster Recovery, Identity and Access Management, Internet Security, Information Systems Security Architecture Professional, Key Management, Password Management, Public Key Infrastructure, Zero Trust Network Access, SSL Certificate Management, Cyberark, System Availability, Delivery Pipeline, Information Technology, Sentry - **Published:** October 23, 2026 - **Apply:** https://www.careerbuilder.com/job-details/information-security-engineer-6-fremont-ca--ba3f4f05-613f-4aa8-a65a-c5f79200e5c7 ## About the Role Information/Data Security (InfoSec), Information Technology & Information Systems, Digital Certificates, Public Key Infrastructure (PKI), Internet Security, Systems Administration/Management, Onboarding, Policy Development, DevOps, Cloud Applications, ### Privileged Access Management Architecture & Engineering * Lead CyberArk PAM architecture, design, and platform strategy. * Establish standards, deployment methods, and support processes. * Design scalable PAM solutions for users, applications, vendors, and OT environments. * Align PAM initiatives with Zero Trust and cybersecurity objectives. ### CyberArk Platform Administration & Engineering * Implement and support CyberArk PAM, PSM, CPM, EPM, and password management services. * Manage onboarding and lifecycle of privileged accounts and systems. * Develop policies for vaulting, credential rotation, and session monitoring. * Automate onboarding, reporting, and compliance activities. ### Secrets Management & Machine Identity Security * Lead CyberArk Secrets Manager deployment and support. * Design secure secret management for applications, cloud platforms, and DevOps pipelines. * Establish standards for credential rotation, authentication, and machine identities. * Partner with engineering teams to eliminate embedded credentials. ## What you'll do. con't ### PKI & Certificate Services * Manage enterprise PKI and certificate service platforms. * Oversee certificate lifecycle processes, including issuance, renewal, and revocation. * Integrate certificate management with cloud, infrastructure, and application environments. * Define governance for certificates, keys, and cryptographic standards. ### Security, Compliance & Governance * Ensure PAM, secrets, and PKI platforms meet security and compliance requirements. * Implement least-privilege, JIT access, and Zero Trust controls. * Partner with audit, risk, and security teams on remediation efforts. * Support audits through reporting, evidence collection, and control validation. ## What you'll do, con't ### Platform Reliability & Operational Excellence * Resolve complex PAM, authentication, and certificate-related issues. * Maintain monitoring, reporting, backup, and disaster recovery capabilities. * Improve platform performance, scalability, and security. * Create and maintain technical documentation and operational procedures. ### Technical Leadership & Solution Delivery * Lead delivery from requirements through deployment and operational support. * Mentor engineers and promote engineering best practices. * Support cybersecurity, cloud, and modernization initiatives. * Influence architecture decisions across security, identity, infrastructure, and application teams., * Bachelor's degree in Computer Science, Information Systems, Computer Engineering, Cybersecurity, or a related technical discipline required. * Master's degree in Information Security, Cybersecurity, Engineering, or a related discipline preferred. * 10+ years of experience in cybersecurity, Identity and Access Management, infrastructure security, platform engineering, cloud security, or related technical disciplines. * 7+ years of hands-on experience implementing and supporting CyberArk or comparable privileged access management platforms. * Demonstrated experience delivering enterprise privileged access management, secrets management, PKI, certificate lifecycle management, and machine identity security services at global scale. * Proven experience designing and operating highly available, mission-critical security platforms that support infrastructure, applications, cloud, manufacturing, and business operations. * Experience leading PAM modernization initiatives, privileged identity governance programs, certificate management transformations, secrets management deployments, or cloud security projects. * Proven history of successfully delivering complex engineering projects from architecture through production implementation, transition to operations, and ongoing lifecycle support. * Experience mentoring engineers and establishing technical standards within large engineering organizations without requiring direct people-management responsibility., * CyberArk Certified Delivery Engineer (CDE) * CyberArk Certified Defender (CCD) * CyberArk Certified Sentry (CCS) * Certified Information Systems Security Professional (CISSP) * Certified Information Security Manager (CISM) * Microsoft Certified: Cybersecurity Architect Expert * GIAC security certifications such as GSEC, GCSA, or related credentials * PKI, cryptography, cloud security, or machine identity security certifications ## Our commitment ## Description The Lead CyberArk / Privileged Access Management Engineer is responsible for the architecture, engineering, delivery, and operational excellence of enterprise privileged access management, secrets management, privileged identity security, PKI, and certificate services. The role requires a seasoned security engineering professional with a consistent track record of delivering secure, scalable, production-grade solutions in complex global environments.