Senior Security Engineer - CyberArk

LPL’s Identity and Access Management (IAM) Engineering organization is seeking talented professionals to join a high‑performing team supporting and enhancing our Privileged Access Management (PAM) engineering capabilities. This team partners closely across technology and security to deliver secure, scalable, and reliable access solutions in a complex enterprise environment.

Job Overview

As a Senior Security Engineer, you will serve as a primary technical contributor responsible for engineering, deploying, and maintaining LPL’s CyberArk Privileged Access Management platform. You will play a key role in shaping the future direction of the PAM ecosystem, providing technical leadership, operational support, and meaningful contributions across production support, development, and project initiatives.

This role is well‑suited for an experienced professional with broad technical expertise, an understanding of industry best practices, and a passion for automation, process efficiency, and continuous improvement.

Key Responsibilities

• Design, deploy, configure, and maintain CyberArk Privilege Cloud in a global enterprise environment

• Provide ongoing support and maintenance for CyberArk components, including: Conjur Enterprise, Credential Providers, Privleged Session Manager (PSM), Privledged Session Manager for SSH, Central Policy Manager (CPM)

• Administer privileged user accounts across Windows and UNIX platforms using CyberArk solutions

• Integrate CyberArk with enterprise platforms such as LDAP providers, Windows and UNIX servers, databases, and network devices

• Create and manage CyberArk safes, platforms, and access ownership models

• Manage CPM policies, including updates and redistribution

• Customize and maintain CPM and PSM connectors

• Perform health monitoring and operational checks to ensure platform availability and reliability

• Interpret and apply corporate security standards and baseline requirements

• Maintain platform architecture diagrams and end‑user support documentation

• Produce security and operational reports to support troubleshooting and issue resolution

• Partner with architects and engineers to collect data and generate reports aligned to defined specifications

• Test and certify new CyberArk versions and patches, documenting findings and recommendations

• Develop and execute test plans

• Produce and maintain operational metrics and reporting

What We’re Looking For

We are seeking collaborative professionals who are client‑focused, team‑oriented, and energized by working in a fast‑paced environment. The ideal candidate demonstrates accountability, curiosity, and a commitment to delivering high‑quality outcomes while contributing to a culture of continuous improvement.

Requirements

• 5+ years of overall IT experience, including 3+ years in cybersecurity

• 3+ years of hands‑on experience supporting the CyberArk suite of products and infrastructure

• Experience deploying and implementing Privileged Identity Management and Conjur/DAP solutions in large‑scale environments

Preferences

• Bachelor’s degree in Computer Science, Engineering, Mathematics, Physics, or a related field

• 5+ years experience configuring and deploying CPM and PSM connectors

• 3+ years with CyberArk Sentry, Defender, or Guardian certification

• 3+ years experience managing CyberArk infrastructure deployed on VMware or AWS

• Experience with Windows automation and scripting (e.g., .NET, VBScript, PowerShell, administrative scripting)

Core Competencies

• Ability to explain complex technical concepts clearly to a wide range of audiences

• Self‑directed, dependable, and accountable in managing work and priorities

• Willingness to take ownership of initiatives and drive work through completion

• Analytical problem‑solver with root cause analysis capabilities and a solutions‑oriented mindset

• Experience implementing configuration changes, remediation activities, and mitigation strategies

• Ability to document installation procedures, standard operating procedures (SOPs), and technical guides

• Familiarity with enterprise change management processes; experience with ServiceNow is a plus

• Experience managing both human and non‑human (service and bot) accounts