Senior PAM Engineer

Lighthouse Technology Services is partnering with our client to fill their PAM Engineer position! This is a 12-18 month contract opportunity and will be hybrid in Buffalo NY. We are open to remote candidates who have their CDE Certification.

This role will be a W2 employee of Lighthouse Technology Services. No C2C or subcontracting arrangements will be considered.

What Youll Be Doing:

• Design implement and operate Privileged Access Management and Secrets Management solutions within a large regulated enterprise environment
• Develop and deploy new use cases for CyberArk platforms including credential vaulting privileged session management and access policy enforcement
• Integrate PAM and secrets management capabilities into DevOps pipelines and application delivery workflows using automation and APIs
• Partner with application cloud and platform teams to embed security controls into CI/CD and cloud-native architectures
• Build and maintain scalable automation for credential rotation access workflows platform integrations and user onboarding using PowerShell and REST APIs
• Collaborate in an Agile environment with three weekly standups weekly engineering calls and three-week sprint cycles
• Manage and resolve tickets independently through Incident and Service Management systems responding to BAU requests
• Ensure compliance with least privilege principles session monitoring requirements and internal risk audit and regulatory standards
• Leverage Azure Key Vault for secure storage and lifecycle management of application secrets keys and certificates
• Design resilient highly available PAM integrations across hybrid on-premises and cloud platforms

What Youll Need to Have:

• 10 years of hands-on experience with CyberArk Privileged Access Management in large regulated enterprise environments
• Strong DevOps and automation engineering background with ability to integrate security platforms into modern development workflows
• Proven experience with Azure Key Vault GitLab Ansible PowerShell scripting and REST API automation
• Deep expertise in hybrid infrastructure environments including Windows and Linux systems Active Directory and Entra ID
• Demonstrated ability to work with change and incident management tools in large enterprise settings within regulated industries
• Developer or engineering background with CI/CD tooling integration experience rather than traditional systems administration
• Ability to hit the ground running work independently after onboarding and contribute immediately by resolving tickets within the first sprint cycle
• Strong collaboration skills with ability to partner effectively across cross-functional teams while minimizing friction for development teams
• CyberArk CDE (Cloud or DevOps Extensions) certification highly preferred

Pay Range: $90-$100/hr

Questions about any of our jobs Email us at

View all of our open jobs here: