Information Security Engineer II - Privileged Access Management

Information Security Engineer II - Privileged Access Management - First Citizens Bank - Selma, NC

This position ensures the technological and digital security of the Bank at an advanced level of ability and technical expertise. Mitigates exposure to cyber threats, security risks, and unauthorized access. Assesses organizational networks, applications, or systems for potential vulnerabilities. Protects assets and information through a variety of methods, resolving security issues or incidents as they arise. Maintains a strong knowledge of industry practices, technology, and evolving threats in order to enhance defenses for the Bank's information systems and resources. May provide guidance for less experienced associates in the work group.

This person should possess strong analytical and technical problem-solving skills as well as experience in the different phases of the system life cycle, to support multiple projects, development of SOP's and day-to-day functional administration and support for PAM. The engineer should have in-depth experience in management of passwords/credentials (such as default accounts, service accounts, keys, etc.) in PAM solutions.

• Support the deployment and integration of privileged account security solutions.
• Ability to discuss technical concepts and interdependencies with customers
• Experience gathering high level functional and operational requirements
• Experience developing and managing multiple system designs concurrently
• Provide operation and maintenance of existing PAM solutions
• Develop design documentation, standard operating procedures (SOP’s) and implementation/deployment plans for privileged account security solutions and identity governance solutions
• Provide after-hours and on-call production support when required
• Develop diagrams and documentation to support infrastructure configuration changes.
• Provide security tool enhancements and performance tuning to increase capability to support new requirements.
• Plan, test, and deploy firmware, software upgrades, and security fixes.

Bachelor's Degree and 4 years of experience in Systems Engineering, Network, or Information Security OR High School Diploma or GED and 8 years of experience in Systems Engineering, Network, or Information Security

Required Knowledge and Skills: 

• Experience supporting PAM solutions (CyberArk, HashiCorp, Delinea, etc.) in enterprise environment
• Ability to proficiently utilize SailPoint identity management system a plus
• Proficiency with MS Visio, PowerPoint, Word, and Excel
• Background in information security systems with specific knowledge around access control
• Background in role-based access control for privileged access
• Hands-on Windows 2019 or later Server administration experience
• Hands-on Active Directory and LDAP query experience
• Hands-on PowerShell/Python or similar scripting experience
• Functional understanding of TCP/IP networks and firewalls
• Functional understanding of the following protocols: TCP, UDP, DNS, NetBIOS, HTTP, HTTPS, SMTP, SNMP, SSH, SSL
• Basic UNIX/Linux system administration experience