Vacancy expired!
Your Opportunity
The PAM engineering team is tasked with delivering the firms next generation host access and privilege management solution on prem and in the cloud. This role will be focused on engineering and implementing a strategic solution utilizing Active Directory and Quest One Identity's Safeguard Suite for credential vaulting, endpoint privileges, session management and secrets management. Additionally, candidates will spend some time focused on sustained engineering a mature Centrify PAM deployment in Schwab's TDAmeritrade business unit. What you are good atWe are seeking an experienced PAM SME to augment the team with a specific scope of work that includes:- Developing, documenting, and enforcing the standards, security procedures, and controls for access to ensure integrity of compute platforms
- Design/delivery of additional privilege session management controls to enrich existing RBAC solution with additional features like "just in time access", command listing, and read only shell
- Build and deliver detective controls: UBA (user behavioral analytics) as well privileged access , metrics/reporting dashboards from session audit datasets
- Interface with internal security, audit and risk functions to ensure adherence to security policies and procedures
- Assist in ongoing project delivery tasks: deployment, migration and support work
- Expert understanding of Linux operating systems internals and security architecture
- Subject matter expertise with Active Directory, integrating Unix into AD (AD bridging configurations)
- Subject matter expertise with Kerberos, LDAP, SSH and public key infrastructures
- Experience implementing and supporting a mainstream PAM tool. . . Hands on experience with Centrify, Safeguard, CyberArk or BeyondTrust Powerbroker platforms would be a pl
- Scripting and automation skills with Unix shell and MS PowerShell.
- Understanding of RBAC and ABAC access delegation schemes
- Understanding of privilege & identity lifecycle management best practices
- Experience developing web services and API's with Python, Java, C# or another mainstream development platform is a plus.
- Bachelors degree is preferred.
- Most Schwabbies have the opportunity to voluntarily work in the office or at home based on their preference
- When the firm is ready to fully return to the office, employees will have the flexibility of a hybrid work environment, spending some time working remote and some time in the office.
- Employees and managers can discuss and decide what works best for them, with additional flexibility available based on their role, business needs, and individual circumstances.
Vacancy expired!