IAM Security Engineer 3

The IAM Security Engineer 3 is responsible for the delivery and support of Privileged Account Management (PAM) solutions for our on-prem and cloud infrastructure. This is an impactful and multifaceted role that involves engineering, hands-on support, advanced troubleshooting responsibilities, and support of project-based work for two leading PAM platforms (HashiCorp Vault and CyberArk). Applicants must have experience with either CyberArk or HashiCorp Vault to start and then will be trained on the other. Position Responsibilities: Assist in the buildout and support of HashiCorp Vault enterprise in a highly available environment Support and enhance existing CyberArk infrastructure and capabilities Assist in the streamlining of application onboarding and migration as it relates to secrets management within HashiCorp Vault and CyberArk Work with IT teams across the company to ensure HashiCorp Vault and CyberArk are adopted consistently and effectively Design and deliver PAM solutions which enhance security and compliance Provide advanced troubleshooting, participate in on-call rotation, disaster recovery tests, and develop solutions and processes to eliminate off hours support calls Develop processes, guidelines, and documentation for consumption by internal teams Assist teams in identifying, properly storing, managing, and retrieving their credentials Essential Qualifications: Hands-on experience deploying, maintaining, and enhancing HashiCorp Vault or CyberArk Working knowledge of other core IAM capabilities such as LDAP, MFA, and single sign-on technologies Proven experience working in a support-orientated role handling end-user requests and incidents Familiarity with change management processes and the ability to plan, represent, and execute infrastructure changes Any experience with scripting is highly desirable Desirable Qualifications: Experience with automation, CI/CD, orchestration, and configuration management Experience in cloud platforms (GCP preferred, but AWS or Azure accepted) Experience with CI/CD tools such as Jenkins Experience with image lifecycle management using tools such as Packer Experience with Infrastructure as Code (IaC) using tools such as Terraform, CloudFormation, and Chef Proficiency in scripting languages such as Python, Bash, Perl, PowerShell, or Ruby Experience with personal passwords managers Proficiency in explaining concepts, use cases, and technologies in DevOps, operations, security, cloud, microservices, containers, and scheduling platforms An ability to build upon the HashiCorp Vault foundation by adding support for ephemeral identities and adoption of zero-trust concepts Personal Attributes: Highly self-motivated and self-directed, with keen attention to detail Ability to interface and work with highly technical counterparts in other departments within the company to provide solutions to technical problems Ability to succinctly articulate complex technical issues to business sponsors Effective time management skills Ability to work both independently and in a team-oriented, collaborative environment Ability to articulate difficult concepts or materials to gain consensus Experience in a large, international enterprise is preferred Formal Education & Certification A Bachelor's degree in Computer Science or Information Systems or equivalent combination of education and related work experience Certifications or equivalent experience in PAM enterprise platforms Security-focused certifications such as CISSP or CompTIA a plus Cloud-focused certifications in GCP, AWS or Azure a plus ITIL familiarity or certification a plus # LI-RK2 #LI-Hybrid # CME Group : Where Futures are Made CME Group is the world's leading and most diverse derivatives marketplace. But who we are goes deeper than that. Here, you can impact markets worldwide. Transform industries. And build a career by shaping tomorrow. We invest in your success and you own it - all while working alongside a team of leading experts who inspire you in ways big and small. Problem solvers, difference makers, trailblazers. Those are our people. And we're looking for more. To be considered for this role you will be redirected to and must complete the application process on our careers page. To start the process click the Continue to Application or Login/Register to apply button below.