Lighthouse Technology Services is partnering with our client to fill their PAM Engineer position! This is a 12-18 month contract opportunity and will be hybrid in Buffalo, NY. We are open to remote candidates who have their CDE Certification.
This role will be a W2 employee of Lighthouse Technology Services. No C2C or subcontracting arrangements will be considered.
What You'll Be Doing:
- Design, implement, and operate Privileged Access Management and Secrets Management solutions within a large, regulated enterprise environment
- Develop and deploy new use cases for CyberArk platforms, including credential vaulting, privileged session management, and access policy enforcement
- Integrate PAM and secrets management capabilities into DevOps pipelines and application delivery workflows using automation and APIs
- Partner with application, cloud, and platform teams to embed security controls into CI/CD and cloud-native architectures
- Build and maintain scalable automation for credential rotation, access workflows, platform integrations, and user onboarding using PowerShell and REST APIs
- Collaborate in an Agile environment with three weekly standups, weekly engineering calls, and three-week sprint cycles
- Manage and resolve tickets independently through Incident and Service Management systems, responding to BAU requests
- Ensure compliance with least privilege principles, session monitoring requirements, and internal risk, audit, and regulatory standards
- Leverage Azure Key Vault for secure storage and lifecycle management of application secrets, keys, and certificates
- Design resilient, highly available PAM integrations across hybrid on-premises and cloud platforms
What You'll Need to Have:
- 10+ years of hands-on experience with CyberArk Privileged Access Management in large, regulated enterprise environments
- Strong DevOps and automation engineering background with ability to integrate security platforms into modern development workflows
- Proven experience with Azure Key Vault, GitLab, Ansible, PowerShell scripting, and REST API automation
- Deep expertise in hybrid infrastructure environments including Windows and Linux systems, Active Directory, and Entra ID
- Demonstrated ability to work with change and incident management tools in large enterprise settings within regulated industries
- Developer or engineering background with CI/CD tooling integration experience rather than traditional systems administration
- Ability to hit the ground running, work independently after onboarding, and contribute immediately by resolving tickets within the first sprint cycle
- Strong collaboration skills with ability to partner effectively across cross-functional teams while minimizing friction for development teams
- CyberArk CDE (Cloud or DevOps Extensions) certification highly preferred
Pay Range: $90-$100+/hr
Questions about any of our jobs? Email us at
recruiting@lhtservices.com
View all of our open jobs here: jobs.lhtservices.com