Lead Entra Id Engineer

The Lead CyberArk / Privileged Access Management Engineer is responsible for the architecture, engineering, delivery, and operational excellence of enterprise privileged access management, secrets management, privileged identity security, PKI, and certificate services. The role requires a seasoned security engineering professional with a consistent track record of delivering secure, scalable, production-grade solutions in complex global environments.

Privileged Access Management Architecture & Engineering

• Lead CyberArk PAM architecture, design, and platform strategy.
• Establish standards, deployment methods, and support processes.
• Design scalable PAM solutions for users, applications, vendors, and OT environments.
• Align PAM initiatives with Zero Trust and cybersecurity objectives.

CyberArk Platform Administration & Engineering

• Implement and support CyberArk PAM, PSM, CPM, EPM, and password management services.
• Manage onboarding and lifecycle of privileged accounts and systems.
• Develop policies for vaulting, credential rotation, and session monitoring.
• Automate onboarding, reporting, and compliance activities.

Secrets Management & Machine Identity Security

• Lead CyberArk Secrets Manager deployment and support.
• Design secure secret management for applications, cloud platforms, and DevOps pipelines.
• Establish standards for credential rotation, authentication, and machine identities.
• Partner with engineering teams to eliminate embedded credentials.

PKI & Certificate Services

• Manage enterprise PKI and certificate service platforms.
• Oversee certificate lifecycle processes, including issuance, renewal, and revocation.
• Integrate certificate management with cloud, infrastructure, and application environments.
• Define governance for certificates, keys, and cryptographic standards.

Security, Compliance & Governance

• Ensure PAM, secrets, and PKI platforms meet security and compliance requirements.
• Implement least-privilege, JIT access, and Zero Trust controls.
• Partner with audit, risk, and security teams on remediation efforts.
• Support audits through reporting, evidence collection, and control validation.

• 15 years of related experience with a Bachelor’s degree in Computer Science, Information Systems, Computer Engineering, Cybersecurity, or a related technical discipline; or 12 years and a Master’s degree; or a PhD with 8 years experience; or equivalent experience. 
• 10+ years of experience in Identity and Access Management, Information Security, Infrastructure Engineering, Cloud Security, or related technology disciplines.
• 7+ years of hands-on experience designing, implementing, and supporting Microsoft Entra ID solutions in complex enterprise environments.
• Demonstrated experience delivering access management solutions for multiple identity populations, including workforce, customer, external partner, supplier, contractor, application, and non-human identities.
• Proven experience with large-scale application onboarding, federation, authentication modernization, access policy engineering, identity lifecycle integration, and cloud identity transformation initiatives.
• Experience leading technical teams or workstreams, mentoring engineers, and driving engineering best practices without requiring direct people-management responsibility.
• Track record of successfully delivering mission-critical identity and access management programs in highly regulated, globally distributed, and operationally complex environments.

• Experience supporting semiconductor, high-tech manufacturing, or other Fortune 500 global enterprises.
• Experience with one or more adjacent identity or security platforms such as Ping Identity, Okta, ForgeRock, Saviynt, SailPoint, CyberArk, or similar enterprise IAM technologies.
• Knowledge of Zero Trust architecture, identity threat detection, risk-based access, workload identity, non-human identity, and AI agent identity governance use cases.
• Familiarity with cloud platforms and enterprise application ecosystems such as Azure, AWS, SAP, ServiceNow, Salesforce, custom web applications, and API platforms.
• Microsoft Certified: Identity and Access Administrator Associate.
• Microsoft Certified: Cybersecurity Architect Expert.
• Certified Information Systems Security Professional (CISSP).
• Certified Information Security Manager (CISM).
• Certified Identity and Access Manager or equivalent IAM-focused certification.

We believe it is important for every person to feel valued, included, and empowered to achieve their full potential. By bringing unique individuals and viewpoints together, we achieve extraordinary results.

Lam Research ("Lam" or the "Company") is an equal opportunity employer. Lam is committed to and reaffirms support of equal opportunity in employment and non-discrimination in employment policies, practices and procedures on the basis of race, religious creed, color, national origin, ancestry, physical disability, mental disability, medical condition, genetic information, marital status, sex (including pregnancy, childbirth and related medical conditions), gender, gender identity, gender expression, age, sexual orientation, or military and veteran status or any other category protected by applicable federal, state, or local laws. It is the Company's intention to comply with all applicable laws and regulations. Company policy prohibits unlawful discrimination against applicants or employees.

Lam offers a variety of work location models based on the needs of each role. Our hybrid roles combine the benefits of on-site collaboration with colleagues and the flexibility to work remotely and fall into two categories – On-site Flex and Virtual Flex. ‘On-site Flex’ you’ll work 3+ days per week on-site at a Lam or customer/supplier location, with the opportunity to work remotely for the balance of the week. ‘Virtual Flex’ you’ll work 1-2 days per week on-site at a Lam or customer/supplier location, and remotely the rest of the time.

#LI-DM1