PAM Security Engineer: Privileged Access (Hybrid/Remote)

Metropolitan Transportation Authority; New York (NY); Hybrid; USD 110,000 - 140,000; Full time

Job summary

The Metropolitan Transportation Authority, North America’s largest transportation network serving 15.3 million people, seeks a Cybersecurity Engineer to manage and analyze cybersecurity risks. You will design, build, and maintain infrastructure and applications to support a secure posture across OT, IT, and cloud environments, collaborating with security engineers, architects, and vendors.

Key responsibilities include secure configuration, incident response, and risk reduction through privileged

Qualifications

• Bachelor’s degree in Arts/Sciences and 3+ years of relevant experience; equivalent combination considered.
• BA/BS in Computer Science or related field preferred.
• OCI certification and security certifications preferred on hire.

Responsibilities

• Research emerging threats and vulnerabilities to aid in identifying network incidents.
• Design, configure, and integrate secure solutions in assigned technology domains.
• Provide incident response support and containment actions.
• Perform system hardening, configuration, and optimization for infrastructure and applications.
• Coordinate with vendors and security teams to reduce cybersecurity risks.
• Review alerts and incident reports and escalate as needed.

Skills

Privileged access management

PAM platform engineering

Just-in-Time access

Tiered administration

Endpoint privilege management

PIM & MFA/SSO integration

Education

BA/BS in CS or related field

Oracle Cloud Infrastructure certification

CISSP or related certification

Job description

The Metropolitan Transportation Authority, North America’s largest transportation network serving 15.3 million people, seeks a Cybersecurity Engineer to manage and analyze cybersecurity risks. You will design, build, and maintain infrastructure and applications to support a secure posture across OT, IT, and cloud environments, collaborating with security engineers, architects, and vendors.

Key responsibilities include secure configuration, incident response, and risk reduction through privileged