Cyber Managed Services - Software Engineer - Privileged Access Management - Senior

EY•Charlotte, NC

2d•$77,500 - $160,500

About The Position

The Senior Software Engineer will design, develop, test, deploy, and support API- and event-driven services that automate privileged-account onboarding, vaulting, validation, membership management, and self-service workflows across CyberArk, Delinea, and HashiCorp platforms. Working within an integrated product team, the engineer will contribute across the software delivery lifecycle, from solution design and API contracts through production readiness and operational support. The role involves backend APIs, connectors, and workflow services, including the Interactive Account Onboarding API and Interactive Vaulting Connector. The position uses Java and Spring Boot alongside Azure services and related technologies, and collaborates with product, architecture, UX, DevOps, AccessHub, PAM platform, infrastructure, and other stakeholder teams. Success is measured by delivery of reliable, secure, maintainable workflow services; automated test coverage and end-to-end validation; reduced manual effort and faster privileged-access requests; clear production-readiness and operational documentation; and effective collaboration that adheres to security, architecture, and engineering standards.

Requirements

Bachelor’s degree in computer science, engineering, information systems, cybersecurity, or a related field, or equivalent practical experience.
Approximately 6–9 years of software engineering experience, with strong recent hands-on backend development.
Proficiency in Java and Spring Boot; working knowledge of Python and modern web technologies such as Angular, TypeScript, or JavaScript.
Experience designing and consuming REST APIs, building microservices, and implementing asynchronous or event-driven integrations.
Experience with Microsoft Azure, Azure Service Bus, containerized applications, and Kubernetes-based deployment environments.
Strong understanding of authentication, authorization, service accounts, Active Directory groups, secrets management, and secure application integration.
Hands-on experience with automated testing and code-quality practices; ability to diagnose failures across application, API, queue, and infrastructure layers.
Experience using Git-based workflows, CI/CD pipelines, and Agile delivery tools such as Jira and Confluence.
Strong written and verbal communication skills and the ability to collaborate across engineering, product, security, and operations teams.

Nice To Haves

Experience delivering privileged access management solutions using CyberArk, Delinea Secret Server, HashiCorp Vault, or comparable platforms.
Familiarity with PAM concepts including safes, privileged accounts, shared accounts, interactive accounts, command elevation, account onboarding, vaulting, and credential lifecycle management.
Experience with Docker, AKS, AVI GSLB, ARM templates, Chef, Groovy, Datadog, Prometheus, SonarQube, GitHub CodeQL, Mend, or GitHub Advanced Security.
Experience with Karate or similar API test-automation frameworks and with automated end-to-end testing.
Experience in a regulated financial-services environment and knowledge of secure software development, change management, and production-readiness controls.
Ability to review existing code and architecture, identify gaps, and independently deliver enhancements with limited ramp-up time.

Responsibilities

Design and implement backend APIs, connectors, and workflow services for privileged-account onboarding, interactive account vaulting, safe creation and lookup, account lifecycle actions, and privileged-role membership updates.
Enhance and maintain the Interactive Account Onboarding API and Interactive Vaulting Connector, including API-contract changes, queue-message processing, validation endpoints, and PAM platform integrations.
Develop resilient integrations using REST APIs, Microsoft Graph, Azure Service Bus queues and topics, and microservice or event-driven patterns.
Translate business and technical requirements into solution designs, API contracts, user stories, test scenarios, and production-ready code.
Build automated unit, integration, and end-to-end tests, including positive and negative scenarios; support system, regression, disaster-recovery, and production validation.
Support source-code cleanup, configuration externalization, secure secrets handling, CI/CD deployment, release planning, and controlled promotion through non-production and production environments.
Troubleshoot application, integration, data, and deployment issues using logs and observability tools; implement appropriate retry, error-handling, and resiliency patterns.
Partner with product owners, architects, UX, DevOps, AccessHub, PAM platform teams, infrastructure teams, and other stakeholders to deliver end-to-end workflow outcomes.
Create and maintain technical documentation, implementation procedures, diagrams, test evidence, and operational support materials.
Participate in Agile ceremonies, code reviews, backlog refinement, sprint planning, demonstrations, and continuous-improvement activities.