Senior PAM Engineer - 3650482

Lighthouse Technology Services•Buffalo, NY

3d•Hybrid

About The Position

Lighthouse Technology Services is partnering with our client to fill their PAM Engineer position! This is a 12-18 month contract opportunity and will be hybrid in Buffalo, NY. We are open to remote candidates who have their CDE Certification. This role will be a W2 employee of Lighthouse Technology Services. No C2C or subcontracting arrangements will be considered.

Requirements

10+ years of hands-on experience with CyberArk Privileged Access Management in large, regulated enterprise environments
Strong DevOps and automation engineering background with ability to integrate security platforms into modern development workflows
Proven experience with Azure Key Vault, GitLab, Ansible, PowerShell scripting, and REST API automation
Deep expertise in hybrid infrastructure environments including Windows and Linux systems, Active Directory, and Entra ID
Demonstrated ability to work with change and incident management tools in large enterprise settings within regulated industries
Developer or engineering background with CI/CD tooling integration experience rather than traditional systems administration
Ability to hit the ground running, work independently after onboarding, and contribute immediately by resolving tickets within the first sprint cycle
Strong collaboration skills with ability to partner effectively across cross-functional teams while minimizing friction for development teams

Nice To Haves

CyberArk CDE (Cloud or DevOps Extensions) certification highly preferred

Responsibilities

Design, implement, and operate Privileged Access Management and Secrets Management solutions within a large, regulated enterprise environment
Develop and deploy new use cases for CyberArk platforms, including credential vaulting, privileged session management, and access policy enforcement
Integrate PAM and secrets management capabilities into DevOps pipelines and application delivery workflows using automation and APIs
Partner with application, cloud, and platform teams to embed security controls into CI/CD and cloud-native architectures
Build and maintain scalable automation for credential rotation, access workflows, platform integrations, and user onboarding using PowerShell and REST APIs
Collaborate in an Agile environment with three weekly standups, weekly engineering calls, and three-week sprint cycles
Manage and resolve tickets independently through Incident and Service Management systems, responding to BAU requests
Ensure compliance with least privilege principles, session monitoring requirements, and internal risk, audit, and regulatory standards
Leverage Azure Key Vault for secure storage and lifecycle management of application secrets, keys, and certificates
Design resilient, highly available PAM integrations across hybrid on-premises and cloud platforms