Cybersecurity Engineer - PAM

Solu Technology Partners is seeking a Cybersecurity Engineer who specializes in Privileged Access Management and Secrets Management. The role concentrates on designing, implementing, and supporting PAM and secret solutions across hybrid cloud environments, with responsibilities spanning on-premises and cloud integrations. This onsite position in Buffalo, NY offers a salary of USD 161,800 per year and requires a Bachelor’s degree.

Responsibilities

• Design, deploy, manage, and optimize enterprise Privileged Access Management solutions.
• Oversee privileged credential vaulting, privileged session management, access policy enforcement, credential rotation, and audit logging.
• Implement and support secrets management using Azure Key Vault for secure storage and lifecycle management of application secrets, certificates, and encryption keys.
• Develop and maintain privileged access controls that enforce least privilege, just-in-time access, credential rotation, and privileged session monitoring.
• Ensure PAM solutions align with security, compliance, audit, and regulatory standards.
• Integrate PAM and secrets management capabilities into CI/CD pipelines and modern DevOps workflows.
• Develop automation using PowerShell, REST APIs, and other scripting technologies to streamline onboarding, credential management, provisioning, and lifecycle operations.
• Create reusable automation for onboarding privileged accounts, password rotation, access workflows, and platform integrations.
• Collaborate with DevOps, cloud, and application development teams to embed security controls into cloud-native and enterprise application environments.
• Design and support secure PAM integrations across hybrid infrastructure, including Windows, Linux, Active Directory, Entra ID, and Microsoft Azure.
• Support highly available, resilient, and scalable PAM platform architecture.
• Implement authentication, authorization, logging, monitoring, and security controls across enterprise environments.
• Troubleshoot complex infrastructure, identity, and privileged access issues while maintaining operational excellence.
• Partner with infrastructure, identity, cloud, application, and security teams to improve privileged access security.
• Participate in security architecture reviews and recommend improvements to privileged access controls.
• Support internal and external audits by providing documentation, reporting, and evidence of security controls.
• Develop operational procedures, standards, and technical documentation for PAM services.

Requirements

• This opportunity is not open to C2C relationships or visa sponsorship. Local candidates only.
• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or equivalent professional experience.
• Demonstrated expert-level experience designing, implementing, and supporting Privileged Access Management and Secrets Management solutions within large enterprises.
• Hands-on experience with CyberArk Privileged Access Management, including credential vaulting, privileged session management, access policy management, credential lifecycle automation, and audit logging.
• Experience implementing and administering Azure Key Vault.
• Experience automating security processes using PowerShell and REST APIs.
• Strong understanding of least privilege, privileged identity security, credential rotation, and privileged access governance.
• Experience supporting Windows and Linux server environments.
• Strong knowledge of Active Directory and Microsoft Entra ID.
• Experience integrating security controls into DevOps and CI/CD pipelines.
• Excellent analytical, troubleshooting, communication, and collaboration skills.

Technologies

• CyberArk
• Azure Key Vault
• PowerShell
• REST APIs
• Active Directory
• Microsoft Entra ID
• Microsoft Azure
• Windows
• Linux
• GitLab
• Ansible
• CyberArk Cloud or DevOps Extensions (CDE)

Preferred Qualifications

• Experience with CyberArk Cloud or DevOps Extensions (CDE).
• Experience with GitLab and Ansible.
• Experience integrating PAM solutions with cloud-native applications and infrastructure.
• Experience supporting highly regulated environments such as financial services, healthcare, or government.
• Knowledge of enterprise authentication, authorization, logging, monitoring, and security architecture best practices.
• Industry certifications such as CyberArk Defender/Sentry, Microsoft Azure Security, CISSP, Security+, or related certifications are preferred.