Senior PAM Platform Engineer: Zero Trust and Automation

The Depository Trust & Clearing Corporation (DTCC); Tampa (FL); Hybrid; USD 140,000 - 190,000; Full time

Benefits offered by this job

Competitive compensation

Health and life insurance

Paid Time Off

Hybrid work model

Job summary

DTCC is seeking a Senior / Lead Engineer within the CISO organization to design, build, and operate highly available, secure PAM services across hybrid environments. You will own production outcomes, drive automation, and ensure observability and audit readiness in a Zero Trust framework.

You will lead architectural improvements, implement JIT access, session recording, credential vaulting, and API integrations while collaborating with teams across cloud and on-premises environments.

Qualifications

• Minimum of 6 years of related experience.
• Bachelor's degree preferred or equivalent experience.

Responsibilities

• Design and evolve PAM platform architecture with a focus on scalability, resilience (HA/DR), and security-by-design.
• Drive platform maturity: Implement capabilities (JIT access, session recording, credential vaulting) and onboarding of new systems.
• Implement and maintain end-to-end observability for PAM platforms using monitoring, logging, and alerting tools (e.g., Splunk, Prometheus, Grafana).
• Governance & compliance: Establish policies for privileged account lifecycle, enforce password complexity and rotation, ensure audit readiness (SOX, PCI).
• Automation & integration: Embed PAM into CI/CD pipelines; develop scripts/connectors for automated provisioning and session management.
• Operational excellence: Monitor PAM performance, lead incident response for privileged access breaches, perform root-cause analysis and remediation.
• Stakeholder engagement: Communicate platform health, roadmap, risk posture to senior leadership; manage vendor relationships and licensing.
• Mentor for other engineers—reviewing designs, code, and operational practices.
• Disaster recovery readiness: Participate in DR exercises and ensure PAM resilience across loss-of-region scenarios.

Skills

PAM concepts

Automation (CI/CD)

Scripting (Python/Groovy)

Cloud & Kubernetes

Windows & Linux

Regulatory compliance

Zero Trust awareness

Education

Bachelor's degree preferred

Equivalent experience

Tools

Jenkins

Python

Groovy

Splunk

Prometheus

Grafana

Active Directory

Job description

DTCC is seeking a Senior / Lead Engineer within the CISO organization to design, build, and operate highly available, secure PAM services across hybrid environments. You will own production outcomes, drive automation, and ensure observability and audit readiness in a Zero Trust framework.

You will lead architectural improvements, implement JIT access, session recording, credential vaulting, and API integrations while collaborating with teams across cloud and on-premises environments.