Lead Privileged Access Engineer - Hybrid PAM Architect

The Depository Trust & Clearing Corporation (DTCC); United States; Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Competitive pay

Health insurance

PTO

Hybrid work model

Job summary

DTCC is seeking a Senior/Lead Engineer within the CISO organization to design, build, and operate PAM services across hybrid environments. You will own privileged access, drive automation, and ensure the platform is observable and auditable to support Zero Trust in production.

The role requires leading by example, mentoring other engineers, and contributing to incident response and disaster recovery exercises in a hybrid, on-site/work-from-home model across U.S. locations.

Qualifications

• 6+ years of experience in security/platform engineering.
• Strong understanding of privileged account lifecycle and credential vaulting.
• Experience with automation and CI/CD (Jenkins, Python, Groovy).

Responsibilities

• Design and evolve PAM platform architecture for scalability and security.
• Implement JIT access, session recording, vaulting, and API integrations.
• Ensure end-to-end observability with monitoring and logging tools.

Skills

Security Engineering

IAM

Automation

CI/CD

Windows/Linux

Regulatory Compliance

Education

Bachelor's degree preferred

Tools

Jenkins

Python

Groovy

Job description

DTCC is seeking a Senior/Lead Engineer within the CISO organization to design, build, and operate PAM services across hybrid environments. You will own privileged access, drive automation, and ensure the platform is observable and auditable to support Zero Trust in production.

The role requires leading by example, mentoring other engineers, and contributing to incident response and disaster recovery exercises in a hybrid, on-site/work-from-home model across U.S. locations.