Associate Principal, Privileged Access Management

What You'll Do

This position is responsible for driving key Privileged Account Management priorities including CyberArk and Hashi Vault implementations, integrations, and remediation activities. In addition, the position will be responsible for providing cloud security engineering support and subject matter expertise/guidance.

Primary Duties and Responsibilities:

To perform this job successfully, an individual must be able to perform each primary duty satisfactorily.

• Perform Privileged Access Management (PAM) Work utilizing CyberArk and Hashi Vault

  • Plan, design, and execute the PAM strategy

  • Implement Privileged Session Management solution through CyberArk

  • Work across multiple teams and pillars to socialize and align PAM requirements to the organization

  • Remediate and troubleshoot PAM related errors across the CyberArk and Hashi Platforms

  • Provide operational support for PAM platforms

  • Work on integrations with other applications and systems to provide CyberArk or Hashi support

  • Build CyberArk infrastructure

  • Lead architecture development and creation of relevant documentation

  • Assist with product documentation and processes for PAM team

• Provide Cloud Security Engineering Services

  • Identify cloud-based security objectives for PAM program and provide SME level expertise

  • Integrate hybrid model with cloud and on-prem services

  • Provide best practices recommendations for cloud connectivity and account management

  • Produce detailed documentation around all aspects of cloud integration and functionality.

  • Deliverables: Provide Cloud related documentation, guidance, and assistance.

• Operational Skills

  • Assist in Tier 2 / 3 support of PAM platforms

  • Provide training, documentation, and Security Operation Procedures (SOP’s) to Managed Security Services Provider (MSSP) vendor for continued development of operations support

  • Deliverables: Provide operational support and documentation / guidance for all operational requirements

Supervisory Responsibilities:

None

Qualifications:

The requirements listed are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the primary functions.

• Deep understanding of CyberArk and its components

• Prior utilization of representational state transfer application programming interface (REST API)

• Experience with PAM related architecture and best practices

• Strong understanding of Cloud Service Providers and relevant experience with integration and configuration of PAM platforms into the cloud

• Operational experience helping manage CyberArk and Hashi Vault infrastructure

• Ability to manage multiple intricate projects with strict deadlines while maintaining best in class work.

• Effective oral and written communication, analytical, judgment and collaboration skills.

• Ability to effectively communicate in both formal and informal review settings with all levels of management.

• Ability to work with local and remote IT staff/management, vendors and consultants.

• Ability to work independently and possess strong organizational skills

Technical Skills:

• Knowledge or usage of Terraform / HCL

• Strong understanding of modern deployment technologies including CICD, Terraform, Ansible, and Docker

• Proficiency in cryptography.

• Experience with Windows, Unix, Cisco, platforms, and controls.

• 3-5+ Years’ direct experience with CyberArk or Hashi at an Engineering level

• 5+ Years’ experience in PAM management and platforms

• PAM related certifications (CyberArk Defender OR Sentry / Hashi Administrator)

Education and/or Experience:

• Bachelors Degree or higher in Computer Science or related security field

• 5+ Years experience working directly with CyberArk

Certificates or Licenses:

Certification in at least one or more of the following:

• Hashi certificate

• CyberArk Defender and Sentry

• DevOps Security or related

Who We Are

The Options Clearing Corporation (OCC) is the world's largest equity derivatives clearing organization. Founded in 1973, OCC is dedicated to promoting stability and market integrity by delivering clearing and settlement services for options, futures and securities lending transactions. As a Systemically Important Financial Market Utility (SIFMU), OCC operates under the jurisdiction of the U.S. Securities and Exchange Commission (SEC), the U.S. Commodity Futures Trading Commission (CFTC), and the Board of Governors of the Federal Reserve System. OCC has more than 100 clearing members and provides central counterparty (CCP) clearing and settlement services to 19 exchanges and trading platforms. More information about OCC is available at www.theocc.com.

What We Offer

A highly collaborative and supportive environment developed to encourage work-life balance and employee wellness. Some of these components include:

A hybrid work environment, up to 3 days per week of remote work

Tuition Reimbursement to support your continued education

Student Loan Repayment Assistance

Technology Stipend allowing you to use the device of your choice to connect to our network while working remotely

Generous PTO and Parental leave

Competitive health benefits including medical, dental and vision