Haystack
← Back to Jobs
Engineering

Senior Technical Engineer (PAM Engineering)

Tech ObserverBuffalo, NY🇺🇸United StatesPosted 11 Aug 2026

Why This Role Stands Out

This hybrid role offers a fantastic opportunity to leverage your expertise in Privileged Access Management and DevOps automation within a reputable company, contributing to enterprise-level security solutions. You'll thrive here if you have a deep understanding of CyberArk and cloud security, with a passion for integrating robust security practices into modern development pipelines. Apply now to advance your career in a dynamic and impactful engineering position.

Quick Overview

Work Type
Hybrid
Level
Mid Senior

Job Description

Senior Technical Engineer (PAM Engineering)

Buffalo, NY (4 days onsite/1 day remote - mandatory, no exceptions)

12+-month contract

Web Cam Interview

NOTES FROM MANAGER / REQUIRED SKILLS & EXPERIENCE:

  • Skill Set 1: Privileged Access & Secrets Management Engineering Expert-level experience designing, implementing,
  • Skill Set 2: DevOps & Automation for Security Platforms
  • Skill Set 3: Enterprise Infrastructure & Cloud Security Engineering

Ideal Skills and Technologies for Candidate

Privileged Access & Secrets Management Engineering

  • Demonstrated expert level experience designing, implementing, and operating Privileged Access Management (PAM) and Secrets Management solutions in large, regulated enterprise environments.
  • Strong hands-on expertise with CyberArk platforms, including credential vaulting, privileged session management, access policy enforcement, audit logging, and credential lifecycle automation.
  • Experience leveraging Azure Key Vault for secure storage and management of application secrets, keys, and certificates.
  • Proven ability to enforce least privilege, credential rotation, session monitoring, and compliance with internal risk, audit, and regulatory standards.

DevOps & Automation for Security Platforms

  • Proven experience integrating PAM and secrets management capabilities into DevOps and application delivery pipelines.
  • Strong automation skills using scripting and APIs (e.g., PowerShell, REST) to support scalable onboarding, credential rotation, access workflows, and platform integrations.
  • Able to partner effectively with application, cloud, and platform teams to embed security controls into modern CI/CD and cloud native architectures while minimizing friction for development teams.

Enterprise Infrastructure & Cloud Security Engineering

  • Strong background in hybrid enterprise infrastructure and cloud environments, including Windows and Linux systems, Active Directory and Entra ID, and Azure services.
  • Experience designing resilient, highly available, and secure PAM integrations across on premises and cloud platforms.
  • Deep understanding of authentication, authorization, logging, monitoring, and enterprise security architecture within financial services or other highly regulated environments.

Required / Preferred Technologies:

  • CyberArk Privileged Access Management (Required)
  • CyberArk CDE (Cloud or DevOps Extensions) Preferred
  • Azure Key Vault
  • GitLab/ Ansible
  • PowerShell and REST API automation
  • CI/CD and DevOps tooling integration
  • Active Directory / Entra ID
  • Windows and Linux platforms

EDUCATION AND EXPERIENCE REQUIRED:

  • Combined minimum of 12 years higher education and/ or work experience in systems design, management, and/or architecture.
  • Thorough understanding of the system development and infrastructure lifecycle and architecture, vendor best practices, IT Service Management, and systems design.

EDUCATION AND EXPERIENCE PREFERRED:

  • Bachelor s degree in computer science or computer engineering.
  • Minimum 12 years advanced experience in a technical engineering position involving infrastructure design technologies, data management and interchange, system design and/or development for complex applications.
  • Ability to translate complex business and functional requirements into structured high quality implementations using any variety of industry standard approaches.
  • Demonstrated ability to develop alternative solutions to complex problems and recommend the best solution to the technology business, and project teams.
  • Advanced technical skills.
  • Advanced analytical skills.
  • Advanced troubleshooting skills.
  • Advanced problem solving skills.
  • Verifiable industry and/or vendor expertise in relative technologies.
  • Able to meet with clients of varying levels to gather, document, and analyze system specifications and requirements, work closely with integrators, developers, and testers in the fast-paced environment.
  • Ability to work independently and collaboratively with others in team environment.
  • Ability to use effective facilitation skills and techniques to elicit and review requirements from a diverse range of stakeholders and group size.
  • Understanding of how the people, processes and technology within an organization interact in relationships and patterns to create a feasible solution on projects of medium to high complexity.
  • Excellent written and verbal communication skills.
  • Possesses effective influencing skills.
  • Process-oriented.
  • Logical thinker.
  • Strong knowledge of server/client and virtual technologies.
  • Ability to master complex tasks with minimal supervision.
  • Experience with project estimation and budget/planning activities.
  • Adaptable.
  • Able to learn quickly in a rapid pace environment.

For the Candidate: Please provide responses for ALL of the questions below to confirm you have ALL of the required skills/experience (please be sure the information is accurate, honest, and that the resume also reflects the same skills/experience, so we re not rejected & flagged for discrepancies):

  • Are you currently under contract w/ an employer where you require C2C only?
  • If hired, can you work as a W2 employee of our company, for the contract duration (required, no exceptions)?
  • Do you reside in or near the Buffalo, NY area, or open to relocation out of pocket to be onsite from day 1 in a hybrid work model (4 days onsite/1 day remote - mandatory, no exceptions)?
  • If relocating, are you able to relocate within 2 weeks of offer acceptance?
  • LinkedIn profile link?
  • Do you possess exceptional communication skills (verbal/written)?

Skill / Category

Experience (Years)

Relevant Projects

Commentary / Highlights w/ the Skill

IT overall

Privileged Access & Secrets Management Engineering (Expert-level experience designing, implementing, etc. (required)

DevOps & Automation for Security Platforms (required)

Enterprise Infrastructure & Cloud Security Engineering (required)

Required / Preferred Technologies:

  • CyberArk Privileged Access Management (Required)
  • CyberArk CDE (Cloud or DevOps Extensions) Preferred
  • Azure Key Vault
  • GitLab/ Ansible
  • PowerShell and REST API automation
  • CI/CD and DevOps tooling integration
  • Active Directory / Entra ID
  • Windows and Linux platforms
  • CyberArk Privileged Access Management (Required):
  • CyberArk CDE (Cloud or DevOps Extensions) Preferred:
  • Azure Key Vault:
  • GitLab/ Ansible:
  • PowerShell and REST API automation:
  • CI/CD and DevOps tooling integration:
  • Active Directory / Entra ID:
  • Windows and Linux platforms:

Banking and/or Financial domains (required)

Skills

CAM

Similar jobs