*On-Site Contract Opportunity*

Lighthouse Technology Services is partnering with our client to fill their Cyber Security Engineer (PAM) position! This is a 12+ month contract opportunity and will be on-site in Buffalo, New York. This role will be a W2 employee of Lighthouse Technology Services. 

Position Overview

As a Workforce IAM - PAM - Cyber Security Engineer, you will play a crucial role in implementing and supporting Privileged Access Management Solutions in alignment with the organization's identity and access management strategy. You will work closely with cross-functional teams to ensure the effective management of privileged access rights, enforce security policies, and maintain regulatory compliance. This role functions with a moderate level of autonomy, leveraging team peer connections and support from more senior members of the WIAM team.

What You'll Be Doing:

• Implementation of PAM Solutions that aligns with industry best practices, regulatory requirements, and organizational policies.
• Collaborate with internal and external auditors to ensure compliance with IAM-related regulatory requirements, manage audits, and respond to audit inquiries.
• Adhere to applicable operational risk controls in accordance with Company or regulatory standards and policies and standards.
• Develop, implement, and enforce privileged access management policies, procedures, and guidelines, ensuring compliance with relevant regulatory bodies.
• Establish processes for privileged user provisioning, de-provisioning, and modification of access rights across critical infrastructure, platforms and applications, ensuring timely and accurate access management.
• Define and maintain Privilege Access Security Models, Role-Based Access Control (RBAC) models, mapping roles and responsibilities to access privileges, and ensuring segregation of duties (SoD) and least privilege principles are enforced.
• Monitor, report, develop and address anomalies of key performance indicators (KPIs) and key risk indicators (KRIs).
• Develop strategies and architectures to securely manage, monitor, and control privileged access to critical systems and data.
• Configure PAM tools according to the organization's specific requirements and integrate them with existing systems and workflows.
• Monitor privileged access activities, detect anomalies or suspicious behavior, and conduct regular audits to ensure adherence to security policies.
• In the event of security incidents or breaches involving privileged accounts, lead the response efforts, investigate the root causes, and implement corrective actions to prevent future occurrences.
• Collaborate with cross-functional teams, including IT, security, and compliance departments, to ensure alignment of PAM initiatives with organizational goals. Provide training and awareness programs to educate users about the importance of privileged access management and best practices for securing sensitive resources.

What You'll Need to Have:

• Bachelor's degree and a minimum of four years’ experience in PAM domain, cybersecurity, risk, and/or governance role. In lieu of a degree, a combined minimum of 8 years’ higher education and/or work experience.
• A strong understanding of cybersecurity principles, including authentication, logging and monitoring, authorization, encryption, and network security.
• Proficiency in using PAM tools such as CyberArk, BeyondTrust, Thycotic, or similar solutions.
• Understanding of IAM concepts, including role-based access control (RBAC), least privilege access, and directory services, authentication services, IDp, MFA, Security Models (e.g., Active Directory).
• Knowledge of network protocols, firewall configurations, and VPN technologies to ensure secure access to privileged resources.
• Understand of various aspects of Cloud technology, Understanding of Enterprise Hybrid-cloud environments. various cloud types and platforms (SaaS, PaaS, IaaS, Azure, AWS, GCP)
• Familiarity with various operating systems (e.g., Windows, Linux, Unix) and their security features to implement effective access controls.
• Proficiency in scripting languages (e.g., Python, PowerShell) to automate repetitive tasks, streamline processes, and integrate PAM solutions with existing systems. CIDI technology and source control, DEVSECOPS, Secrets Managements (e.g. GitLAB,)
• Ability to assess risks associated with privileged access, prioritize mitigation efforts, and develop strategies to reduce the organization's exposure to security threats.
• Strong verbal and written communication skills to collaborate with cross-functional teams, document procedures, and communicate security requirements effectively.
• Aptitude for troubleshooting technical issues, analyzing complex problems, and finding innovative solutions to address security challenges.
• Familiarity with regulatory compliance requirements (e.g., GDPR, HIPAA, PCI DSS) and industry standards related to privileged access management.
• Willingness to stay updated on the latest cybersecurity trends, technologies, and best practices through ongoing training and professional development.
• Thoroughness in implementing security controls, documenting configurations, and reviewing access policies to ensure accuracy and effectiveness.

Pay Range: $105-$135/hr +

Questions about any of our jobs? Email us at [email protected] 

View all of our open jobs here: jobs.lhtservices.com