Senior Information Security Engineer - PAM

Position Summary:

The Information Security Engineer will report directly to the Information Security Manager and work hands-on owning Privileged Access Management (PAM) including overall strategy, planning, development and support. The engineer should have previous experience integrating users and systems onto identity management solutions. This engineer will also be responsible for building out and continuously improving our overall security posture, identifying gaps and risks as well as recommended controls. This may involve testing, log analysis, interacting with vendors and partners, automation and scripting, and systems administration tasks. The Engineer will participate in an on-call rotation, working alongside MDR partners to resolve system generated alerts. 

Essential Functions:

• Identify and implement changes needed in account access management processes, architecture design and configurations necessary to achieve the technology organization goals
• Integrate servers, middleware, network devices, applications, and business services with PAM solution
• Analyze, define, and prioritize the business and functional requirements for PAM initiatives. 
• Establish and maintain strong partnerships with key stakeholders to establish project expectations and priorities, coordinate and regularly report on project progress and accomplishments to the project team, stakeholders, and sponsors
• Ensure that proper security settings are applied to reflect the model of least privilege
• Troubleshoot and resolve password rotation and other PAM tool issues
• Provide gap analysis of existing tools and controls to determine areas of increased risk and action those items through remediation. 
• Participate and assist team through Tabletop exercises, documenting gaps and maintaining until resolution. 
• Implement and document best-practice security procedures, standards, and guidelines potentially for other teams or business units. 
• Identify new cybersecurity risks and develop mitigation plans. Be familiar with the risk PAM tools present and implement controls and procedures to reduce misuse. 
• Partner with other departments and business units to implement security solutions including project & change management. 
• Advocate security awareness and teach secure behavior and methods. 
• Perform technical risk assessments, triage security testing results and manage security response actions. 
• Work closely with IT on the development of security metrics, assisting in compliance audits, and continuous security improvements. 
• Assist in compliance activities such as external audits from customers, regulatory compliance projects, and overall information security reviews. 

Education/Experience/Skills:

• Bachelor's degree in Computer Science/Engineering/Information Security or equivalent experience.  
• Minimum of 5 years information security experience, with at least 3 years managing a PAM solution
• Strong PAM administration background, including overseeing the policy management, credential rotation, and reporting processes.  
• CISSP or comparable Information Security certification preferred, but not required. 
• Experience with a variety of security toolsets, including the ability to work with a Firewall, Secure Web Gateway, Public Cloud, Endpoint Detection+Response, and/or Secure Email Gateway tools
• Strong written and oral communication skills are a must. 
• Experience working in a team-oriented, collaborative environment. 

Disclaimer