Senior PAM Engineer - Zero Trust & Automation Lead

DTCC; Coppell (TX); Hybrid; USD 150,000 - 190,000; Full time

Benefits offered by this job

Competitive compensation

Health and life insurance

Pension / Retirement benefits

Paid Time Off and Family Care

Hybrid work model

Job summary

DTCC is seeking a Senior/Lead PAM Engineer to design and operate privileged access management services across hybrid environments. You will implement JIT access, session recording, and credential vaulting while embedding PAM into infrastructure, cloud, and application workflows.

You will lead by example, drive automation, ensure observability, and maintain security-by-design across production platforms. A strong focus on regulatory compliance and incident response is required.

Qualifications

• Minimum 6 years in security/platform engineering or IAM.
• Experience with privileged access management and credential vaulting.
• Familiarity with Windows, Unix/Linux, and cloud environments.

Responsibilities

• Design PAM platform architecture with focus on scalability, resilience, and security-by-design.
• Implement and maintain end-to-end observability for PAM platforms including monitoring and logging.
• Drive automation and integration into CI/CD pipelines and workflows.
• Lead incident response for privileged access breaches and perform root-cause analysis.
• Mentor other engineers and participate in DR exercises for PAM resilience.
• Engage stakeholders and manage vendor relationships and licensing.

Skills

Security engineering

IAM

Automation

CI/CD

Windows & Unix/Linux

Education

Bachelor's degree preferred

Tools

Jenkins

Python

Groovy

Active Directory

Job description

DTCC is seeking a Senior/Lead PAM Engineer to design and operate privileged access management services across hybrid environments. You will implement JIT access, session recording, and credential vaulting while embedding PAM into infrastructure, cloud, and application workflows.

You will lead by example, drive automation, ensure observability, and maintain security-by-design across production platforms. A strong focus on regulatory compliance and incident response is required.