PAM Lead Engineer

Experian • Texas, TX

6h • Remote

About The Position

The PAM Lead Engineer is our technical authority, Subject Matter Expert (SME), and capability owner for Privileged Access Management (PAM). You'll lead the design, implementation, and continuous evolution of enterprise PAM capabilities, with a strong focus on the CyberArk Privileged Cloud Platform and solid working knowledge of the broader CyberArk product suite, including CyberArk PAS, CyberArk EPM, and CyberArk Conjur. Being the technical lead, you will ensure corporate PAM solutions and designs are secure, compliant, and scalable, supporting large-scale deployments across AWS, Azure, and GCP. You will drive a unified PAM capability roadmap, aligned with regulatory requirements, priorities, and industry best practices, while providing deep hands-on expertise for complex implementations and integrations. You will serve as the final technical escalation point, design authority, and trusted advisor to security leadership, enterprise architecture, cloud, DevOps, and governance teams. You will report to the Director of PAM. This is a remote position. You'll have opportunity to: Serve as the enterprise-wide technical SME and technical product owner for Privileged Access Management, with primary ownership of the CyberArk Privileged Cloud Platform. Define, maintain, and evolve the PAM technical strategy, architecture, and roadmap, ensuring alignment with Zero Trust principles, compliance obligations, and a cloud-first security strategy. Lead the deployment, integration, and optimization of CyberArk Secure Infrastructure Access (SIA) and CyberArk Cloud Security Access (CSA) across hybrid and multi-cloud environments. Architect PAM solutions for AWS, Azure, and GCP, securing IaaS, PaaS, and SaaS workloads, as well as DevOps platforms and CI/CD pipelines. Implementation of technical capabilities utilizing CyberArk products to secure and manage secrets on hybrid and multi-cloud environments. Drive automation-first PAM deployments using tools such as Terraform, Ansible, PowerShell, Python, and CI/CD pipelines. Act as the technical escalation SME and provide mentorship to operations and engineering teams on complex design, implementation, and troubleshooting challenges. Evaluate, prototype, and implement emerging PAM and cloud-native security technologies. Stay current with the CyberArk product roadmap, industry best practices, and the evolving threat landscape. Drive adoption of new PAM capabilities that enhance security posture, operational efficiency, and user experience.

Requirements

• 10+ years of experience in cybersecurity, IAM, or infrastructure security
• 7+ years focused on Privileged Access Management.
• Proven hands-on experience as a CyberArk SME, delivering large-scale, enterprise PAM implementations.
• Demonstrated success implementing the CyberArk Privileged Cloud Platform in complex multi-cloud environments (AWS, Azure, GCP).
• Experience acting as a technical lead, security architect, or technical product owner.
• Deep expertise in implementing and supporting CyberArk solutions, including: o CyberArk PAM Self-Hosted (PAS) o CyberArk Privileged Cloud o CyberArk Endpoint Privilege Manager (EPM) o CyberArk Conjur Enterprise and/or Secrets Hub
• Strong understanding of cloud security architecture, identity and access control models, Zero Trust, and least privilege design principles.
• Advanced experience with automation, Infrastructure as Code (IaC), and scripting.

Responsibilities

• Serve as the enterprise-wide technical SME and technical product owner for Privileged Access Management, with primary ownership of the CyberArk Privileged Cloud Platform.
• Define, maintain, and evolve the PAM technical strategy, architecture, and roadmap, ensuring alignment with Zero Trust principles, compliance obligations, and a cloud-first security strategy.
• Lead the deployment, integration, and optimization of CyberArk Secure Infrastructure Access (SIA) and CyberArk Cloud Security Access (CSA) across hybrid and multi-cloud environments.
• Architect PAM solutions for AWS, Azure, and GCP, securing IaaS, PaaS, and SaaS workloads, as well as DevOps platforms and CI/CD pipelines.
• Implementation of technical capabilities utilizing CyberArk products to secure and manage secrets on hybrid and multi-cloud environments.
• Drive automation-first PAM deployments using tools such as Terraform, Ansible, PowerShell, Python, and CI/CD pipelines.
• Act as the technical escalation SME and provide mentorship to operations and engineering teams on complex design, implementation, and troubleshooting challenges.
• Evaluate, prototype, and implement emerging PAM and cloud-native security technologies.
• Stay current with the CyberArk product roadmap, industry best practices, and the evolving threat landscape.
• Drive adoption of new PAM capabilities that enhance security posture, operational efficiency, and user experience.

Benefits

• Great compensation package and bonus plan
• Core benefits including medical, dental, vision, and matching 401K
• Flexible work environment, ability to work remote, hybrid or in-office
• Flexible time off including volunteer time off, vacation, sick and 12-paid holidays

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed
• Number of Employees: 501-1,000 employees