The Lead CyberArk / Privileged Access Management Engineer is responsible for the architecture, engineering, delivery, and operational excellence of enterprise privileged access management, secrets management, privileged identity security, PKI, and certificate services. The role requires a seasoned security engineering professional with a consistent track record of delivering secure, scalable, production-grade solutions in complex global environments.
- Lead CyberArk PAM architecture, design, and platform strategy.
- Establish standards, deployment methods, and support processes.
- Design scalable PAM solutions for users, applications, vendors, and OT environments.
- Align PAM initiatives with Zero Trust and cybersecurity objectives.
- Implement and support CyberArk PAM, PSM, CPM, EPM, and password management services.
- Manage onboarding and lifecycle of privileged accounts and systems.
- Develop policies for vaulting, credential rotation, and session monitoring.
- Automate onboarding, reporting, and compliance activities.
- Lead CyberArk Secrets Manager deployment and support.
- Design secure secret management for applications, cloud platforms, and DevOps pipelines.
- Establish standards for credential rotation, authentication, and machine identities.
- Partner with engineering teams to eliminate embedded credentials.
- Manage enterprise PKI and certificate service platforms.
- Oversee certificate lifecycle processes, including issuance, renewal, and revocation.
- Integrate certificate management with cloud, infrastructure, and application environments.
- Define governance for certificates, keys, and cryptographic standards.
- Ensure PAM, secrets, and PKI platforms meet security and compliance requirements.
- Implement least-privilege, JIT access, and Zero Trust controls.
- Partner with audit, risk, and security teams on remediation efforts.
- Support audits through reporting, evidence collection, and control validation.
- Resolve complex PAM, authentication, and certificate-related issues.
- Maintain monitoring, reporting, backup, and disaster recovery capabilities.
- Improve platform performance, scalability, and security.
- Create and maintain technical documentation and operational procedures.
- Lead delivery from requirements through deployment and operational support.
- Mentor engineers and promote engineering best practices.
- Support cybersecurity, cloud, and modernization initiatives.
- Influence architecture decisions across security, identity, infrastructure, and application teams.
- 15 years of related experience with a Bachelor’s degree in Computer Science, Information Systems, Computer Engineering, Cybersecurity, or a related technical discipline; or 12 years and a Master’s degree; or a PhD with 8 years experience; or equivalent experience.
- 10+ years of experience in cybersecurity, Identity and Access Management, infrastructure security, platform engineering, cloud security, or related technical disciplines.
- 7+ years of hands-on experience implementing and supporting CyberArk or comparable privileged access management platforms.
- Demonstrated experience delivering enterprise privileged access management, secrets management, PKI, certificate lifecycle management, and machine identity security services at global scale.
- Proven experience designing and operating highly available, mission-critical security platforms that support infrastructure, applications, cloud, manufacturing, and business operations.
- Experience leading PAM modernization initiatives, privileged identity governance programs, certificate management transformations, secrets management deployments, or cloud security projects.
- Proven history of successfully delivering complex engineering projects from architecture through production implementation, transition to operations, and ongoing lifecycle support.
- Experience mentoring engineers and establishing technical standards within large engineering organizations without requiring direct people-management responsibility.
- CyberArk Certified Delivery Engineer (CDE).
- CyberArk Certified Defender (CCD).
- CyberArk Certified Sentry (CCS).
- Certified Information Systems Security Professional (CISSP).
- Certified Information Security Manager (CISM).
- Microsoft Certified: Cybersecurity Architect Expert.
- GIAC security certifications such as GSEC, GCSA, or related credentials.
- PKI, cryptography, cloud security, or machine identity security certifications.
We believe it is important for every person to feel valued, included, and empowered to achieve their full potential. By bringing unique individuals and viewpoints together, we achieve extraordinary results.
Lam Research ("Lam" or the "Company") is an equal opportunity employer. Lam is committed to and reaffirms support of equal opportunity in employment and non-discrimination in employment policies, practices and procedures on the basis of race, religious creed, color, national origin, ancestry, physical disability, mental disability, medical condition, genetic information, marital status, sex (including pregnancy, childbirth and related medical conditions), gender, gender identity, gender expression, age, sexual orientation, or military and veteran status or any other category protected by applicable federal, state, or local laws. It is the Company's intention to comply with all applicable laws and regulations. Company policy prohibits unlawful discrimination against applicants or employees.
Lam offers a variety of work location models based on the needs of each role. Our hybrid roles combine the benefits of on-site collaboration with colleagues and the flexibility to work remotely and fall into two categories – On-site Flex and Virtual Flex. ‘On-site Flex’ you’ll work 3+ days per week on-site at a Lam or customer/supplier location, with the opportunity to work remotely for the balance of the week. ‘Virtual Flex’ you’ll work 1-2 days per week on-site at a Lam or customer/supplier location, and remotely the rest of the time.
#LI-DM1
Salary
CA San Francisco Bay Area Salary Range for this position: $137,000.00 - $287,000.00.
The above salary range for this position is relevant to applicants that reside or work onsite in the California, San Francisco Bay Area only. Salary offers will depend on factors that include the location you work from, your level, education, training, specific skills, years of experience and comparison to other employees already in this role. Actual salary may vary from salary offered due to numerous factors including but not limited to unpaid time off, unpaid leave, company mandated shutdown, and other relevant factors.
Our Perks and Benefits
At Lam, our people make amazing things possible. That’s why we invest in you throughout the phases of your life with a comprehensive set of outstanding benefits.
Skills Required
- Bachelor's degree in Computer Science, Information Systems, Computer Engineering, Cybersecurity, or a related technical discipline
- 10+ years of experience in cybersecurity, Identity and Access Management, infrastructure security, platform engineering, cloud security, or related technical disciplines
- 7+ years of hands-on experience implementing and supporting CyberArk or comparable privileged access management platforms
- Experience delivering enterprise privileged access management, secrets management, PKI, certificate lifecycle management, and machine identity security services at global scale
- Experience designing and operating highly available, mission-critical security platforms supporting infrastructure, applications, cloud, manufacturing, and business operations
- Experience leading PAM modernization initiatives, privileged identity governance programs, certificate management transformations, secrets management deployments, or cloud security projects
- Experience delivering complex engineering projects from architecture through production implementation, transition to operations, and lifecycle support
- Experience mentoring engineers and establishing technical standards within large engineering organizations
- Master's degree in Information Security, Cybersecurity, Engineering, or a related discipline
- CyberArk Certified Delivery Engineer (CDE)
- CyberArk Certified Defender (CCD)
- CyberArk Certified Sentry (CCS)
- Certified Information Systems Security Professional (CISSP)
- Certified Information Security Manager (CISM)
- Microsoft Certified: Cybersecurity Architect Expert
- GIAC security certification such as GSEC or GCSA
- PKI, cryptography, cloud security, or machine identity security certification
Lam Research Corporation Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Lam Research Corporation and has not been reviewed or approved by Lam Research Corporation.
-
Parental & Family Support — Parental leave is described as 16 weeks fully paid for all new parents, with birth mothers averaging about 26 weeks total; adoption assistance and subsidized backup childcare are also included. These programs are consistently highlighted as standout elements of the package.
-
Healthcare Strength — Medical options span PPO, CDHP, and HMO choices with company HSA funding, alongside dental and vision coverage. Coverage quality and breadth are emphasized, supported by wellbeing resources such as an EAP.
-
Equity Value & Accessibility — An ESPP with a discount and look-back/reset features is highlighted, and many technical roles include RSUs and bonuses that lift total compensation. These equity mechanisms are frequently cited as meaningful components of total rewards.
Lam Research Corporation Insights
What We Do
Lam Research Corp. (NASDAQ:LRCX) is a global supplier of innovative wafer fabrication equipment and services to the semiconductor industry. The world's leading companies trust us as their valued partner because we bring together technology leadership, a strong values-based culture, and an unwavering commitment to prove our customers’ next big breakthrough. Our impact on the world can be seen all around us, as nearly every advanced chip today is built with our technology. Through collaboration, precision, and our commitment to delivery, we are transforming atomic-scale engineering and driving semiconductor breakthroughs that define the next generation. Lam Research Social Media Guidelines: By using or accessing this page, you agree to comply with LinkedIn’s Terms and Conditions. While we welcome participation and engagement, it is important to note that postings and/or comments by followers to Lam’s LinkedIn page do not necessarily reflect the opinions of Lam, nor does Lam confirm their accuracy. We expect that participants post content and commentary that is both relevant and respectful to this community as a whole. Lam reserves the right to remove any posts and/or comments that do not adhere to our guidelines and to block anyone who violates them repeatedly. Specifically, we do not tolerate these kinds of posts: • Abusive, harassing, stalking, threatening or attacking others • Defamatory, offensive, obscene, vulgar or depicting violence • Hateful in language targeting race/ethnicity, religion, gender, nationality or political beliefs • Fraudulent, deceptive, misleading or unlawful • Violations of any intellectual property rights • Spamming in nature • Commercial solicitation or solicitation of donations • Link baiting (embedding a link in your post to draw traffic to your own site) View Lam’s Online Privacy Notice Summary : https://www.lamresearch.com/privacy/
