Senior PAM Engineer

Lighthouse Technology Services; Buffalo (NY); Hybrid; USD 124,000 - 138,000; Full time

Job summary

Lighthouse Technology Services is partnering with our client to fill a PAM Engineer position in a hybrid Buffalo, NY environment. This is a 12-18 month contract opportunity and we are open to remote candidates who hold the CDE Certification.

You will design, implement, and operate CyberArk PAM and secrets management, build automation, and integrate security controls into CI/CD and cloud workflows. Strong DevOps experience and hands-on scripting with PowerShell and REST APIs are required.

Qualifications

• 10+ years of hands-on CyberArk PAM in large regulated enterprises.
• Strong DevOps and automation background integrating security into modern workflows.
• Experience with Azure Key Vault, GitLab, Ansible, PowerShell, and REST APIs.

Responsibilities

• Design, implement, and operate PAM and secrets management in a large enterprise.
• Develop use cases for CyberArk platforms including credential vaulting and session management.
• Integrate PAM and secrets management into DevOps pipelines via automation and APIs.
• Partner with application, cloud, and platform teams to embed security in CI/CD and cloud architectures.
• Build scalable automation for credential rotation, access workflows, and onboarding using PowerShell and REST APIs.
• Collaborate in Agile with standups, engineering calls, and sprint cycles.
• Manage and resolve tickets using Incident and Service Management systems.
• Ensure least privilege, session monitoring, and regulatory compliance.
• Leverage Azure Key Vault for secret lifecycle management.
• Design resilient PAM integrations across hybrid on-prem and cloud platforms.

Skills

CyberArk Privileged Access Management

DevOps automation

Azure Key Vault

PowerShell scripting

REST API automation

CI/CD tooling integration

GitLab

Ansible

Windows & Linux

Active Directory / Entra ID

Change & Incident management

Cross-functional collaboration

Tools

GitLab

Ansible

PowerShell

REST API

Job description

Lighthouse Technology Services is partnering with our client to fill their PAM Engineer position! This is a 12-18 month contract opportunity and will be hybrid in Buffalo, NY. We are open to remote candidates who have their CDE Certification.

This role will be a W2 employee of Lighthouse Technology Services. No C2C or subcontracting arrangements will be considered.

What You'll Be Doing:

• Design, implement, and operate Privileged Access Management and Secrets Management solutions within a large, regulated enterprise environment
• Develop and deploy new use cases for CyberArk platforms, including credential vaulting, privileged session management, and access policy enforcement
• Integrate PAM and secrets management capabilities into DevOps pipelines and application delivery workflows using automation and APIs
• Partner with application, cloud, and platform teams to embed security controls into CI/CD and cloud-native architectures
• Build and maintain scalable automation for credential rotation, access workflows, platform integrations, and user onboarding using PowerShell and REST APIs
• Collaborate in an Agile environment with three weekly standups, weekly engineering calls, and three-week sprint cycles
• Manage and resolve tickets independently through Incident and Service Management systems, responding to BAU requests
• Ensure compliance with least privilege principles, session monitoring requirements, and internal risk, audit, and regulatory standards
• Leverage Azure Key Vault for secure storage and lifecycle management of application secrets, keys, and certificates
• Design resilient, highly available PAM integrations across hybrid on-premises and cloud platforms

What You'll Need to Have:

• 10+ years of hands-on experience with CyberArk Privileged Access Management in large, regulated enterprise environments
• Strong DevOps and automation engineering background with ability to integrate security platforms into modern development workflows
• Proven experience with Azure Key Vault, GitLab, Ansible, PowerShell scripting, and REST API automation
• Deep expertise in hybrid infrastructure environments including Windows and Linux systems, Active Directory, and Entra ID
• Demonstrated ability to work with change and incident management tools in large enterprise settings within regulated industries
• Developer or engineering background with CI/CD tooling integration experience rather than traditional systems administration
• Ability to hit the ground running, work independently after onboarding, and contribute immediately by resolving tickets within the first sprint cycle
• Strong collaboration skills with ability to partner effectively across cross-functional teams while minimizing friction for development teams
• CyberArk CDE (Cloud or DevOps Extensions) certification highly preferred

Pay Range: $90-$100+/hr