Senior Security Engineer, Identity

The BIC Cybersecurity Identity program is seeking a highly skilled Senior Security Engineer, Identity to lead the operational management, engineering and continued maturation of our CyberArk Privilege Cloud deployment. This role will serve as a senior technical engineer responsible for defining, onboarding and securing privileged accounts, improving governance and operational processes and help advance the program’s broader identity and access management strategy.

The ideal candidate combines deep hands-on CyberArk engineering expertise with strong operational discipline, support and troubleshooting capabilities and the ability to partner across infrastructure, security, application, operational technology (OT) and business stakeholder teams. This position plays a critical role in reducing risk through the secure management of privileged identities, service accounts and administrative access across complex and hybrid environments.

Key Responsibilities  

• Administer, design and support the deployment of CyberArk Privilege Cloud and associated components, including configuration and enforcement of PAM policies and best practices to secure privileged credentials through vaulting, password rotation and session recording, operational maintenance, troubleshooting and end user support.  
• Lead onboarding of identifying privileged accounts via inventory assessments and/or environment scans, engage with account owners to vault accounts, maintain compliance standards for rotating account passwords, troubleshoot connection issues and design solutions to support business and stakeholder requirements.
• Manage privileged access review schedule and completion, ensuring access is reviewed as required to recertify access levels.
• Execute on the Identity roadmap to mature the PAM program, engaging with business customers to solicit feedback and architect solutions to promote process efficiency while closing risks associated with inappropriate or overprivileged access.
• Partner with cross-functional teams to gather requirements for platform expansion, provide guidance on privileged access policies, password management standards and governance controls to implement enhancements or additional capabilities.

Qualifications

• Required
  • Minimum 4 years of direct experience with configuring and administering PAM solutions (preferably CyberArk Privilege Cloud), managing privileged users and service accounts, supporting password rotation, retrieval and compliance.
  • Strong understanding of privileged account lifecycle and least-privilege enforcement, enterprise authentication methods.
  • Experience supporting PAM operations in complex or hybrid environments spanning on-prem and cloud infrastructure.
  • Advanced troubleshooting, analytical and problem-solving skills.
  • Ability to effectively communicate with technical teams, auditors and stakeholders.
• Preferred
  • Experience with PowerShell and REST APIs
  • Experience working in manufacturing or highly regulated environments
  • CyberArk certifications
  • Experience working in globally distributed environments

BIC World is an Equal Opportunity Employer. We strongly commit to hiring people with different backgrounds and experiences to help us build better products, make better decisions, and better serve our customers. We do not discriminate based upon race, religion, color, national origin, gender, sexual orientation, veteran status, disability status, or similar characteristics. All employment is decided based on qualifications, merit, and business need.

BIC World is not seeking assistance or accepting unsolicited resumes from search firms for this employment opportunity. Regardless of past practice, all resumes submitted by search firms to any team member at BIC via email, or directly to a BIC team member in any form without a valid written search agreement in place for that position will be deemed the sole property of BIC, and no fee will be paid in the event the candidate is hired by BIC as a result of the referral or through other means.