Senior Security Architect (Identity & Infrastructure)

New York Technology Partners; Chicago (IL); On-site; USD 150,000 - 190,000; Full time

Job summary

New York Technology Partners is seeking an Associate Principal in Security Engineering to lead privileged access management efforts, improve the security architecture, and implement AI-based capabilities to strengthen resilience. You will collaborate with cross-functional teams to resolve complex security challenges and drive secure, scalable solutions across the organization.

The role emphasizes 24x7 operational support, secrets lifecycle management, and ongoing modernization of PAM

Qualifications

• Must have experience with privileged access management and security operations.
• Experience in security operations, development, engineering, or architecture.
• Professional experience using AI coding agents or tooling is a plus.

Responsibilities

• Provide 24x7 operational support for privileged management solutions including CyberArk and Vault.
• Maintain and secure PAM infrastructure throughout its lifecycle.
• Advise on secrets management architecture and security-as-code practices.
• Develop system enhancements using AI to improve detection and remediation.

Skills

Privileged access management

Security architecture

CI/CD

AI in security

Secrets management

Scripting languages

Go/Python/PowerShell

Cloud security

Kubernetes

Tools

CyberArk

HashiCorp Vault

AD CS

HSMs

PKI

Terraform

Ansible

Jenkins

Job description

Join our dynamic Security Engineering team as an Associate Principal and make a significant impact on our organization's cybersecurity posture. In this role, you will manage privileged access systems that protect our most critical assets, implement AI-based security capabilities, and help shape our security architecture. This position offers excellent growth opportunities as you will work with best‑in‑class technologies while collaborating with cross‑functional teams to solve complex security challenges. If you are passionate about cybersecurity and seeking a role where your expertise directly strengthens organizational resilience, this is an ideal next step for your career.

Primary Duties and Responsibilities:

To perform this job successfully, an individual must be able to perform each primary duty satisfactorily.

• Provide 24x7 operational support for the suite of privileged management solutions (e.g., CyberArk, HashiCorp Vault, PKI), including implementing hot fixes, resolving bugs, troubleshooting issues, performing break-fixes, managing secrets lifecycle, and delivering end-user support.
• Maintain robust operational integrity of privileged access management infrastructure throughout its lifecycle (e.g., patching, version control, system upgrades, alignment with enterprise and regulatory security standards, etc.).
• Provide organizational subject matter expertise on secrets management and privileged access management architecture, establishing and enforcing "security as code" principles throughout the environment.
• Develop and implement system enhancements to improve platform user experience and automated integrations, while designing long‑term solutions to address operational issues through innovative technologies, including artificial intelligence for faster detection and remediation of functional and technical problems.

Qualifications:

The requirements listed are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the primary functions.

• Knowledge of application authentication and authorization systems (i.e., Active Directory, OAuth 2.0, OIDC, AWS IAM, App Role, Kubernetes, LDAPS, Kerberos, Certificate-based authentication).
• Working knowledge of the cloud ecosystem and CI/CD deployments with Terraform, Ansible, and Jenkins pipelines.
• Working knowledge of security architecture design and principles, including confidentiality, integrity, and availability (CIA).

Technical Skills:

• Expertise in providing operational and engineering support for one or more of the following: CyberArk, HashiCorp Vault, Active Directory Certificate Services (ADCS), Hardware Security Modules (HSMs), and Public Key Infrastructure (PKI).
• Expertise in scripting languages and developing in one or more of the following languages: GoLang, Bash, Python, PowerShell, Ansible, and/or Terraform.
• Knowledge of privileged access management methodologies and techniques for both on‑premises and Cloud implementations.

Education and/or Experience:

• Experience in one or more of the following disciplines: security operations, development, engineering, or architecture.
• Experience supporting privileged access management and access control programs.
• Professional or personal experience using AI coding agents such as OpenAI Codex, Claude Code, or Gemini CLI.