PAM Engineering

Tech Observer; Buffalo (NY); Hybrid; USD 120,000 - 150,000; Full time

Job summary

Tech Observer in Buffalo, NY is seeking a Sr. Technical Engineer specializing in Privileged Access Management (PAM) engineering. Hybrid role with four days onsite and one day remote, for a 12+-month contract.

The ideal candidate brings expert experience with PAM platforms, secret management, Azure Key Vault, and enterprise security architectures, plus DevOps automation, Windows/Linux, Active Directory/Entra ID, and cloud integrations.

Qualifications

• Combined minimum of 12 years higher education and/or work experience in systems design, management, and/or architecture.
• Thorough understanding of system development/infrastructure lifecycle and architecture, vendor best practices, ITSM, and systems design.
• Ability to translate complex business requirements into structured high‑quality implementations.
• Demonstrated ability to develop alternative solutions and recommend best options to technology and project teams.
• Advanced technical, analytical, troubleshooting, and problem-solving skills.
• Effective written and verbal communication; capable of stakeholder facilitation.

Skills

PAM engineering

Azure Key Vault

DevOps automation

PowerShell/REST

CI/CD tooling

Active Directory/Entra ID

Windows & Linux

Education

Bachelors in CS or CE

12+ years experience

Tools

CyberArk PAM

CyberArk CDE

GitLab/Ansible

Job description

Job Title: Sr. Technical Engineer (PAM Engineering

Location: Hybrid/Buffalo, NY (4 days onsite/1 day remote

Duration: 12+-month contract

Ideal Skills and Technologies for Candidate

1. Privileged Access & Secrets Management Engineering

Demonstrated expert‑level experience designing, implementing, and operating Privileged Access Management (PAM) and Secrets Management solutions in large, regulated enterprise environments. Strong hands‑on expertise with CyberArk platforms, including credential vaulting, privileged session management, access policy enforcement, audit logging, and credential lifecycle automation. Experience leveraging Azure Key Vault for secure storage and management of application secrets, keys, and certificates. Proven ability to enforce least privilege, credential rotation, session monitoring, and compliance with internal risk, audit, and regulatory standards.

2. DevOps & Automation for Security Platforms

Proven experience integrating PAM and secrets management capabilities into DevOps and application delivery pipelines. Strong automation skills using scripting and APIs (e.g., PowerShell, REST) to support scalable onboarding, credential rotation, access workflows, and platform integrations. Able to partner effectively with application, cloud, and platform teams to embed security controls into modern CI/CD and cloud‑native architectures while minimizing friction for development teams.

3. Enterprise Infrastructure & Cloud Security Engineering

Strong background in hybrid enterprise infrastructure and cloud environments, including Windows and Linux systems, Active Directory and Entra-ID, and Azure services. Experience designing resilient, highly available, and secure PAM integrations across on‑premises and cloud platforms. Deep understanding of authentication, authorization, logging, monitoring, and enterprise security architecture within financial services or other highly regulated environments.

Required / Preferred Technologies:

• CyberArk Privileged Access Management (Required)
• CyberArk CDE (Cloud or DevOps Extensions) – Preferred
• GitLab/ Ansible
• PowerShell and REST API automation
• CI/CD and DevOps tooling integration
• Active Directory / Entra ID
• Windows and Linux platforms

EDUCATION AND EXPERIENCE REQUIRED:

Combined minimum of 12 years higher education and/ or work experience in systems design, management, and/or architecture.

Thorough understanding of the system development and infrastructure lifecycle and architecture, vendor best practices, IT Service Management, and systems design.

EDUCATION AND EXPERIENCE PREFERRED:

Bachelor’s degree in Computer Science or Computer Engineering.

Minimum 12 years advanced experience in a technical engineering position involving infrastructure design technologies, data management and interchange, system design and/or development for complex applications.

Ability to translate complex business and functional requirements into structured high quality implementations using any variety of industry standard approaches.

Demonstrated ability to develop alternative solutions to complex problems and recommend the best solution to the technology business, and project teams.

Advanced technical skills.

Advanced analytical skills.

Advanced troubleshooting skills.

Advanced problem solving skills.

Verifiable industry and/or vendor expertise in relative technologies.

Able to meet with clients of varying levels to gather, document, and analyze system specifications and requirements, work closely with integrators, developers, and testers in the fast‑paced environment.

Ability to work independently and collaboratively with others in team environment.

Ability to use effective facilitation skills and techniques to elicit and review requirements from a diverse range of stakeholders and group size.

Understanding of how the people, processes and technology within an organization interact in relationships and patterns to create a feasible solution on projects of medium to high complexity.

Excellent written and verbal communication skills.

Possesses effective influencing skills.

Process-oriented.

Logical thinker.

Strong knowledge of server/client and virtual technologies.

Ability to master complex tasks with minimal supervision.

Experience with project estimation and budget/planning activities.