Cyber Security Engineer I - PAM Engineer

This is a remote role that can be hired across multiple markets in the US. 

We are looking for a motivated Privileged Access Management (PAM) Engineer to join our Information Security team. This role is ideal for someone with foundational experience in identity or infrastructure security who is looking to grow their expertise in PAM technologies and privileged account protection. 

You will help support and enhance enterprise PAM solutions while gaining hands-on experience in securing critical systems and credentials. 

• Assist in the deployment, configuration, and integration of PAM solutions across the enterprise. 
• Provide day-to-day operational support and administration of PAM platforms. 

• Support the management and security of privileged accounts and credentials, including service accounts and keys. 

• Collaborate with team members and stakeholders to gather requirements and support implementation efforts. 

• Help develop and maintain technical documentation, including SOPs and system design artifacts. 

• Create and update system diagrams and process documentation using tools like Visio. 

• Participate in system upgrades, patching, and security updates for PAM tools. 

• Assist with troubleshooting, performance tuning, and enhancements of security tools. 

• Support multiple initiatives and projects under guidance from senior engineers. 

• Participate in on-call or after-hours support on a rotational basis. 

Bachelor's Degree and 2 years of experience in Systems engineering, networking, or information security OR High School Diploma or GED and 6 years of experience in Systems engineering, networking, or information security

Preferred Qualifications 

• Basic to intermediate experience with PAM tools (e.g., CyberArk, HashiCorp Vault, Delinea) or exposure to identity/security platforms. 

• Familiarity with privileged account concepts and access control principles. 

• Experience with scripting or automation (PowerShell, Python, or similar) is preferred. 

• Working knowledge of Windows Server administration. 

• Basic experience with Active Directory and directory services (LDAP). 

• Exposure to Linux/UNIX environments. 

• Fundamental understanding of networking concepts (TCP/IP, firewalls). 

• Familiarity with common protocols such as HTTP/HTTPS, DNS, SSH, and SMTP. 

• Proficiency with Microsoft Office tools (Word, Excel, PowerPoint); Visio experience is a plus.

• Exposure to identity governance tools such as SailPoint. 

• Experience with role-based access control (RBAC) concepts. 

• Understanding of security best practices and frameworks. 

• Relevant certifications (e.g., Security+, CySA+, or vendor-specific PAM/IAM certifications) are a plus. 

This job posting is expected to remain active for 30 days from the initial posting date listed above. If it is necessary to extend this deadline, the posting will remain active as appropriate. Job postings may come down early due to business need or a high volume of applicants.

The base pay for this position is generally between $104,000 and $138,000. Actual starting base pay will be determined based on skills, experience, location, and other non-discriminatory factors permitted by law. For some roles, total compensation may also include variable incentives, bonuses, benefits, and/or other awards as outlined in the offer of employment.

Benefits are an integral part of total rewards and First Citizens Bank is committed to providing a competitive, thoughtfully designed and quality benefits program to meet the needs of our associates. More information can be found at https://jobs.firstcitizens.com/benefits.