Information Security Engineer

Pennymac (NYSE: PFSI) is a specialty financial services firm with a comprehensive mortgage platform and integrated business focused on the production and servicing of U.S. mortgage loans and the management of investments related to the U.S. mortgage market. 

At Pennymac, our people are the foundation of our success and at the heart of our dynamic work culture. Together, we work towards a unified goal of helping millions of Americans achieve aspirations of homeownership through the complete mortgage journey.

The IAM Systems Administrator and Identity Security Specialist is responsible for the lifecycle and security of non-human identities, including service accounts, bots, and API keys. This role acts as a primary consultant to engineering and DevOps teams, advocating for secure machine-to-machine communication. The Evangelist will leverage specialized identity security tools to identify risks and work collaboratively across the organization to implement remediation strategies.

RESPONSIBILITIES

• NHI (Non-Human Identity) Governance: Manages the identification, classification, and lifecycle of non-human identities across the enterprise.
• Internal Advocacy: Serves as an "Evangelist" to educate application owners and developers on the risks of hardcoded secrets and unmanaged service accounts.
• Risk Remediation: Analyzes vulnerabilities in service account configurations and recommends modern countermeasures, such as automated rotation or secret injection.
• Cross-Functional Advisory: Collaborates with IT and business partners to ensure that NHI security is factored into the initial configuration of new software and cloud services.
• Audit & Compliance: Tests for compliance with security policies regarding password complexity and rotation for automated accounts.
• Tool Management: Oversees the day-to-day operations of Non-Human Identity Security platforms and secret management vaults.
• Trend Analysis: Examines logs to identify anomalous behavior or "orphaned" accounts that no longer serve a business purpose.

• Experience: Minimum of 3 years of experience in information security, systems administration, or a technical support role.
• Soft Skills & Critical Thinking: Ability to advise on the potential benefits and drawbacks of suggested security actions to non-security audiences.
  • Strong commitment to delivering prompt, high-quality, and efficient service to internal business partners.
• Technical Proficiency:
  • Hands-on experience with at least one scripting language (Python or PowerShell) to automate identity checks.
  • Foundational knowledge of Active Directory and SSO Platforms (Entra ID, Okta, OneLogin, etc.) along with common authentication protocols (OAuth, OIDC).
  • Practical experience with vulnerability scanning or identity monitoring tools.
• Bachelor's degree in Computer Science or Information Security, or equivalent experience.

As one of the top mortgage lenders in the country, Pennymac has helped over 4 million lifetime homeowners achieve and sustain their aspirations of home. Our vision is to be the most trusted partner for home. Together, 4,000 Pennymac team members across the country are guided by our core values: to be Accountable, Reliable and Ethical in all that we do. Pennymac is committed to conducting a business that makes positive contributions and promotes long-term sustainable growth and to fostering an equitable and inclusive environment, where all employees and customers feel valued, respected and supported. 

Benefits That Bring It Home: Whether you're looking for flexible benefits for today, setting up short-term goals for tomorrow, or planning for long-term success and retirement, Pennymac's benefits have you covered. Some key benefits include: 

• Comprehensive Medical, Dental, and Vision
• Paid Time Off Programs including vacation, holidays, illness, and parental leave 
• Wellness Programs, Employee Recognition Programs, and onsite gyms and cafe style dining (select locations)
• Retirement benefits, life insurance, 401k match, and tuition reimbursement 
• Philanthropy Programs including matching gifts, volunteer grants, charitable grants and corporate sponsorships

To learn more about our benefits visit: https://pennymacnews.page.link/benefits

For residents with state required benefit information, additional information can be found at: https://www.pennymac.com/additional-benefits-information

Compensation: Individual salary may vary based on multiple factors including specific role, geographic location / market data, and skills and experience as defined below:

• Lower in range - Building skills and experience in the role
• Mid-range - Experience and skills align with proficiency in the role 
• Higher in range - Experience and skills add value above typical requirements of the role 

Some roles may be eligible for performance-based compensation and/or stock-based incentives awarded to employees based on company and individual performance.