Senior Staff Cyber Security Engineer - PAM

Synopsys•Morrisville, NC

117d•$161,000 - $242,000•Onsite

About The Position

At Synopsys, we drive the innovations that shape the way we live and connect. Our technology is central to the Era of Pervasive Intelligence, from self-driving cars to learning machines. We lead in chip design, verification, and IP integration, empowering the creation of high-performance silicon chips and software content. Join us to transform the future through continuous technological innovation. You are a highly skilled and experienced Privileged Access Management (PAM) leader who is passionate about securing critical systems, identities, and privileged accounts in an increasingly complex threat landscape. You understand that identities are the new security perimeter and have extensive experience designing and operating enterprise-scale Privileged Access Management (PAM) and Identity Governance and Administration (IGA) programs. You have deep expertise with industry-leading PAM, identity governance, secrets management, and privileged session management platforms, ensuring privileged accounts, service accounts, credentials, and secrets are effectively governed, monitored, and protected across on-premises, cloud, and hybrid environments. You thrive in environments where automation, scalability, and security are equally important. You have hands-on experience developing scripts and automation solutions using PowerShell, Python, REST APIs, and orchestration frameworks to streamline onboarding, access reviews, privileged account lifecycle management, credential rotation, and compliance reporting.

Requirements

Bachelor's degree in Information Security, Computer Science, Information Technology, or a related field.
Minimum of 5 years of experience in Cybersecurity, Identity and Access Management (IAM), Identity Governance, or Privileged Access Management (PAM), including at least 2 years in a senior or lead engineering role.
Hands-on experience implementing and supporting Privileged Access Management (PAM) platforms, Identity Governance and Administration (IGA) platforms, Secrets Management solutions, and Identity Lifecycle Management processes.
STRONG UNDERSTANDING OF ZERO TRUST ARCHITECTURE, ROLE-BASED ACCESS CONTROL (RBAC), LEAST PRIVILEGE PRINCIPLES, SEGREGATION OF DUTIES (SOD), AND AUTHENTICATION AND AUTHORIZATION FRAMEWORKS
EXPERIENCE INTEGRATING IDENTITY SECURITY PLATFORMS WITH ENTERPRISE APPLICATIONS, CLOUD PROVIDERS, SECURITY TOOLING, AND DIRECTORY SERVICES.
ADVANCED SCRIPTING AND AUTOMATION EXPERIENCE USING POWERSEHLL, PYTHON, REST APIS AND WORKFLOW AUTOMATION PLATFORMS.
EXPERIENCE SUPPORTING HYBRID AND CLOUD ENVIRONMENTS, INCLUDING PUBLIC CLOUD AND SAAS PLATFORMS.
FAMILIARITY WITH AUTHENTICATION PROTOCOLS AND IDENTITY STANDARDS SUCH AS SAML, OAUTH, OIDC, LDAP, KERBEROS, AND MULTI-FACTOR AUTHENTICATION (MFA).
STRONG UNDERSTANDING OF NIST, CIS CONTROLS, ISO 27001, ZERO TRUST, AND IDENTITY SECURITY BEST PRACTICES.

Nice To Haves

Security certifications such as CISSP, CISM, CCSP, GIAC, Microsoft Security Certifications, or vendor-specific certifications are a plus (or willingness to obtain).

Responsibilities

Designing and implementing enterprise-wide Privileged Access Management strategies and roadmaps aligned with security and compliance requirements.
Architecting, deploying, and managing Privileged Access Management (PAM), Identity Governance and Administration (IGA), secrets management, and privileged session management platforms across global environments.
Configuring and optimizing privileged account onboarding, credential vaulting, password rotation, session monitoring, session recording, and privileged access workflows.
Developing automated workflows for account provisioning, deprovisioning, access certification, entitlement reviews, and privileged access governance.
Integrating PAM and identity security platforms with enterprise directories, cloud environments, infrastructure platforms, DevOps tools, ITSM solutions, and business applications.
Designing and managing enterprise secrets management capabilities for applications, service accounts, privileged credentials, APIs, and automation platforms.
Building scripting and automation capabilities using PowerShell, Python, REST APIs, JSON, and orchestration tools to improve operational efficiency and reduce manual effort.
Conducting privileged access assessments, identifying security gaps, and implementing remediation strategies.
Supporting Identity Governance initiatives, including role-based access controls, access reviews, joiner-mover-leaver processes, and segregation of duties controls.
Partnering with security operations, cloud, infrastructure, audit, compliance, and application teams to ensure effective privileged access controls.
Leading PAM-related audits and providing evidence for SOX, ISO 27001, NIST, PCI-DSS, GDPR, and other regulatory requirements.
Developing PAM standards, policies, procedures, technical documentation, and operational runbooks.
Monitoring platform health, performance, and security while driving continuous improvement and modernization initiatives.