Senior Staff Cyber Security Engineer - PAM
Technology, Data & Digital · IT Infrastructure & Security · Cybersecurity · Systems Engineering
In short
Synopsys seeks a Senior Staff Cyber Security Engineer specializing in Privileged Access Management (PAM) in Morrisville, NC. This role involves designing, implementing, and managing enterprise-scale PAM, IGA, and secrets management solutions, with a strong emphasis on automation using scripting languages and APIs to secure critical systems and data.
Responsibilities
- Designing and implementing enterprise-wide Privileged Access Management strategies and roadmaps.
- Architecting, deploying, and managing PAM, IGA, secrets management, and privileged session management platforms.
- Configuring and optimizing privileged account onboarding, credential vaulting, password rotation, and session monitoring.
- Developing automated workflows for account provisioning, deprovisioning, access certification, and entitlement reviews.
- Integrating identity security platforms with enterprise directories, cloud environments, and DevOps tools.
- Designing and managing enterprise secrets management capabilities for applications, service accounts, and APIs.
- Building scripting and automation capabilities using PowerShell, Python, REST APIs, JSON, and orchestration tools.
- Conducting privileged access assessments and implementing remediation strategies.
- Supporting Identity Governance initiatives, including RBAC, access reviews, and SoD controls.
- Partnering with security operations, cloud, infrastructure, and application teams.
- Leading PAM-related audits and providing evidence for regulatory requirements (SOX, ISO 27001, NIST, PCI-DSS, GDPR).
- Developing PAM standards, policies, and procedures.
- Monitoring platform health, performance, and security.
Requirements
- Bachelor's degree in Information Security, Computer Science, Information Technology, or a related field.
- Minimum of 5 years of experience in Cybersecurity, IAM, IGA, or PAM.
- At least 2 years in a senior or lead engineering role.
- Hands-on experience implementing and supporting PAM platforms, IGA platforms, Secrets Management solutions, and Identity Lifecycle Management processes.
- Strong understanding of Zero Trust Architecture, RBAC, Least Privilege Principles, SoD, and Authentication/Authorization Frameworks.
- Experience integrating identity security platforms with enterprise applications, cloud providers, security tooling, and directory services.
- Advanced scripting and automation experience using PowerShell, Python, REST APIs, and Workflow Automation Platforms.
- Experience supporting hybrid and cloud environments, including public cloud and SaaS platforms.
- Familiarity with authentication protocols and identity standards such as SAML, OAuth, OIDC, LDAP, Kerberos, and MFA.
- Strong understanding of NIST, CIS Controls, ISO 27001, Zero Trust, and identity security best practices.
Desired Qualifications
- Security certifications such as CISSP, CISM, CCSP, GIAC, Microsoft Security Certifications, or vendor-specific certifications are a plus (or willingness to obtain).
Benefits
- Comprehensive health, wellness, and financial benefits.
- Annual bonus, equity, and other discretionary bonuses may be eligible.
- Competitive salaries.
- Company holidays, ETO and FTO Programs.
- Maternity and paternity leave, parenting resources, adoption and surrogacy assistance.
- Purchase Synopsys common stock at a 15% discount with a 24-month look-back.
- Retirement Plans that vary by region and country.
#Cyber Security#PAM#IAM#IGA#Security Engineering#Automation
Company
Synopsys Inc
Job Posted
4 days ago
Employment Type
Full Time
WorkMode
On Site
Experience Level
Senior
Locations
Morrisville, United States
Qualification
Bachelor
Applicants
Be an early applicant