Senior Privileged Access Management (PAM) Engineer

CTG is seeking an experienced Senior Privileged Access Management (PAM) Engineer for our client in Buffalo, NY. This role will lead the design, implementation, integration, and ongoing improvement of enterprise PAM solutions supporting the organization’s security and technology requirements.

Location: Buffalo, NY
Contract Duration: 12 months

Overview

The ideal candidate has extensive experience with privileged access management, infrastructure architecture, systems integration, server environments, and identity security. This individual will provide technical leadership for PAM initiatives, collaborate with business and technology stakeholders, manage vendor interactions, and mentor less-experienced team members.

Key Responsibilities

• Lead the design, development, implementation, and support of enterprise PAM solutions.
• Develop PAM architectures, technical designs, standards, policies, procedures, and supporting documentation.
• Onboard privileged accounts, service accounts, applications, servers, and other technology assets to the PAM platform.
• Implement and support credential vaulting, automated password rotation, privileged session management, access controls, and activity monitoring.
• Integrate PAM solutions with Windows, Linux, Active Directory, cloud platforms, applications, databases, and infrastructure technologies.
• Partner with cybersecurity, identity and access management, infrastructure, application, audit, and business teams to define PAM requirements and recommend appropriate solutions.
• Analyze security requirements, technical dependencies, user needs, and operational constraints.
• Translate complex business and security requirements into reliable technical implementations.
• Troubleshoot PAM platform, integration, authentication, and connectivity issues.
• Support platform upgrades, patches, testing, system integrations, and user acceptance testing.
• Identify opportunities to improve privileged-access controls, automation, scalability, and operational efficiency.
• Estimate the effort, resources, and costs required for moderate to large-scale PAM initiatives.
• Coordinate vendor activities and oversee contract or vendor resources as needed.
• Review technical documentation, designs, proposals, and changes prepared by other team members.
• Mentor engineers, technicians, and systems integrators.
• Promote cybersecurity standards, regulatory requirements, and industry best practices.
• Stay current on PAM technologies and identity-security trends within the financial services industry.

Required Qualifications

• A combined minimum of 12 years of higher education and relevant professional experience in PAM, identity and access management, cybersecurity engineering, infrastructure engineering, systems design, or architecture.
• Advanced experience designing, implementing, integrating, or supporting enterprise PAM solutions.
• Hands-on experience with an enterprise PAM platform such as CyberArk, BeyondTrust, Delinea, One Identity, or a comparable technology.
• Knowledge of privileged-account management, credential vaulting, password rotation, session monitoring, and least-privilege principles.
• Strong experience with Windows and Linux server environments, Active Directory, authentication technologies, and virtualization.
• Experience integrating PAM platforms with applications, databases, infrastructure systems, and cloud environments.
• Advanced technical, analytical, troubleshooting, and problem-solving skills.
• Experience gathering, documenting, and analyzing technical, business, and security requirements.
• Ability to design and deliver solutions within complex enterprise environments.
• Ability to collaborate with cybersecurity, infrastructure, application, audit, and business stakeholders.
• Strong written and verbal communication skills.
• Ability to work independently and collaboratively in a fast-paced environment.

Preferred Qualifications

• Bachelor’s degree in Computer Science, Computer Engineering, Cybersecurity, or a related field.
• Experience with scripting or automation using PowerShell, Python, REST APIs, or similar technologies.
• Knowledge of identity governance, single sign-on, multifactor authentication, and directory services.
• Relevant PAM, cybersecurity, or vendor certifications.
• Experience with project estimation, budgeting, resource planning, and vendor management.
• Previous experience within banking or financial services.
• Familiarity with security frameworks, audit controls, and regulatory requirements affecting privileged access.

Excellent verbal and written English communication skills and the ability to interact professionally with a diverse group are required.

CTG does not accept unsolicited resumes from headhunters, recruitment agencies, or fee based recruitment services for this role.

To Apply:

To be considered, please apply directly to this requisition using the link provided. Kindly forward this to any other interested parties. Thank you!