Technical Architect – Privileged Access Management

🔥 0 minutes ago

🐊 Florida – Remote

🐊 Florida – Remote

💵 $100.1k - $180.2k / year

⏰ Full Time

🟠 Senior

🔴 Lead

🔙 Backend Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Jabil

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 1966

🤝 B2B

B2B • Manufacturing • Sustainability

Jabil is a leading business-to-business (B2B) company providing engineering, manufacturing, supply chain, and design services. With over 50 years of experience, Jabil partners with some of the world's top brands to deliver both scalable and customized solutions. The company operates over 100 locations globally, emphasizing sustainability and community involvement as part of its core values. Jabil is committed to supporting its workforce with diverse and inclusive opportunities and fostering professional growth and innovation. The company is recognized globally for its excellence and commitment to minimizing environmental impact while building vibrant communities.

📋 Description

• Own and operate CyberArk PAM Suite globally — vault configuration, safe structure, session recording, JIT workflows, rotation schedules, and CyberArk for OT session gating • Develop and maintain the PAM roadmap, aligning it with overall cybersecurity strategy and business objectives • Design and implement Just-In-Time privileged access for all Tier 0, Tier 1, and Tier 2 accounts — no standing privilege, all sessions vaulted and recorded • Own the Non-Human Identity governance program — service account vaulting, rotation automation, NHI inventory, and governance framework • Govern PAM for OT alongside the OT Architect — vendor session gating, session recordings, and OT privileged account management • Define and enforce PAM design standards — vault structure, safe naming conventions, rotation schedules, and session recording retention policies • Own the Privileged Access Management technical roadmap and vendor relationship — product roadmap briefings, TAM relationship, upgrade schedule • Integrate CyberArk Threat Analytics with MSSP and SIEM for privileged account anomaly detection • Lead the design, architecture, and implementation of complex Privileged Access Management (PAM) solutions • Translate business requirements and security policies into technical PAM solutions and configurations • Collaborate with various IT teams (e.g., infrastructure, applications, network) to ensure seamless integration of PAM solutions • Provide technical expertise and guidance on PAM best practices, security controls, and compliance requirements (e.g., NIST, ISO 27001, GDPR) • Conduct security assessments, vulnerability analyses, and penetration testing related to privileged access • Develop and implement automation scripts and tools to streamline PAM operations and enhance security posture • Create and maintain comprehensive documentation, including architectural designs, solution configurations, and operational procedures • Support incident response activities related to privileged access breaches or anomalies • Mentor junior security engineers and provide technical leadership within the cybersecurity team • Stay current with emerging PAM technologies, threats, and industry trends.

🎯 Requirements

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field • Minimum of 8 years of experience in cybersecurity, with at least 5 years focused specifically on Privileged Access Management (PAM) architecture and engineering • Proven expertise in designing, implementing, and managing enterprise-grade PAM solutions (e.g., Delinea Secret Server, CyberArk, BeyondTrust) • Strong understanding of identity and access management (IAM) concepts, including directory services (Active Directory, LDAP), SSO, MFA, and federation • In-depth knowledge of security protocols (e.g., Kerberos, OAuth, SAML, OpenID Connect) and cryptographic principles • Experience with scripting languages (e.g., Python, PowerShell) for automation and integration • Familiarity with cloud security principles and PAM in cloud environments (AWS, Azure, GCP) • Solid understanding of network security, operating systems (Windows, Linux), and database security • Excellent analytical, problem-solving, and decision-making skills • Strong communication and interpersonal skills, with the ability to effectively articulate complex technical concepts to both technical and non-technical audiences • Relevant industry certifications such as CISSP, CISM, or vendor-specific PAM certifications are a plus.

🏖️ Benefits

• medical, dental, and vision insurance plans • paid time off accruing at a rate of 3.07 hours during your first year of employment • 4 weeks of paid parental leave • in 2026, 11 company-paid holidays (9 fixed holidays and 2 optional floating holidays), subject to change yearly • 401(k) retirement plan • employee stock purchase plan