Cyber Managed Services - Software Engineer - Privileged Access Management - Senior

Location: Dallas, Alpharetta, Charlotte, Jacksonville, and San Antonio

At EY, we’re all in to shape your future with confidence.

We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world.

Position Summary

The role will design, develop, test, deploy, and support API- and event-driven services that automate privileged-account onboarding, vaulting, validation, membership management, and related self-service workflows across CyberArk, Delinea, and HashiCorp platforms. The engineer will work within an integrated product team and contribute across the software delivery lifecycle, from solution design and API contracts through production readiness and operational support.

Key Responsibilities

• Design and implement backend APIs, connectors, and workflow services supporting privileged-account onboarding, interactive account vaulting, safe creation and lookup, account lifecycle actions, and privileged-role membership updates.
• Enhance and maintain the Interactive Account Onboarding API and Interactive Vaulting Connector, including API-contract changes, queue-message processing, validation endpoints, and integration with PAM platforms.
• Develop resilient integrations using REST APIs, Microsoft Graph, Azure Service Bus queues and topics, and microservice or event-driven patterns.
• Translate business and technical requirements into solution designs, API contracts, user stories, test scenarios, and production-ready code.
• Build automated unit, integration, and end-to-end tests, including positive and negative scenarios; support system, regression, disaster-recovery, and production validation.
• Support source-code cleanup, configuration externalization, secure secrets handling, CI/CD deployment, release planning, and controlled promotion through non-production and production environments.
• Troubleshoot application, integration, data, and deployment issues using logs and observability tools; implement appropriate retry, error-handling, and resiliency patterns.
• Partner with product owners, architects, UX, DevOps, AccessHub, PAM platform teams, infrastructure teams, and other stakeholders to deliver end-to-end workflow outcomes.
• Create and maintain technical documentation, implementation procedures, diagrams, test evidence, and operational support materials.
• Participate in Agile ceremonies, code reviews, backlog refinement, sprint planning, demonstrations, and continuous-improvement activities.

Required Qualifications

• Bachelor’s degree in computer science, engineering, information systems, cybersecurity, or a related field, or equivalent practical experience.
• Approximately 6-9 years of software engineering experience, with strong recent hands-on backend development.
• Proficiency in Java and Spring Boot; working knowledge of Python and modern web technologies such as Angular, TypeScript, or JavaScript.
• Experience designing and consuming REST APIs, building microservices, and implementing asynchronous or event-driven integrations.
• Experience with Microsoft Azure, Azure Service Bus, containerized applications, and Kubernetes-based deployment environments.
• Strong understanding of authentication, authorization, service accounts, Active Directory groups, secrets management, and secure application integration.
• Hands-on experience with automated testing and code-quality practices; ability to diagnose failures across application, API, queue, and infrastructure layers.
• Experience using Git-based workflows, CI/CD pipelines, and Agile delivery tools such as Jira and Confluence.
• Strong written and verbal communication skills and the ability to collaborate across engineering, product, security, and operations teams.

Preferred Qualifications

• Experience delivering privileged access management solutions using CyberArk, Delinea Secret Server, HashiCorp Vault, or comparable platforms.
• Familiarity with PAM concepts including safes, privileged accounts, shared accounts, interactive accounts, command elevation, account onboarding, vaulting, and credential lifecycle management.
• Experience with Docker, AKS, AVI GSLB, ARM templates, Chef, Groovy, Datadog, Prometheus, SonarQube, GitHub CodeQL, Mend, or GitHub Advanced Security.
• Experience with Karate or similar API test-automation frameworks and with automated end-to-end testing.
• Experience in a regulated financial-services environment and knowledge of secure software development, change management, and production-readiness controls.
• Ability to review existing code and architecture, identify gaps, and independently deliver enhancements with limited ramp-up time.

Technology Environment

• Application development: Java 21, Spring Boot, Python, Angular, TypeScript, JavaScript, micro frontends, and .NET for selected legacy components.
• Cloud and integration: Microsoft Azure, AKS, Docker, Azure Service Bus, REST APIs, microservices, event-driven architecture, and Microsoft Graph.
• Delivery and operations: CI/CD pipelines, infrastructure and configuration automation, GitHub-based code management, observability, automated testing, and DevSecOps tooling.
• PAM ecosystem: CyberArk, Delinea Secret Server, HashiCorp Vault, AccessHub, and related onboarding and provisioning platforms.

Success Measures

• Reliable, secure, and maintainable workflow services delivered against sprint and release commitments.
• High automated test coverage and successful end-to-end validation across integrated systems.
• Reduced manual effort and improved turnaround time for privileged-access requests.
• Clear production-readiness evidence, operational documentation, and timely resolution of defects.
• Effective collaboration with stakeholders and consistent adherence to security, architecture, and engineering standards.

What we offer you

At EY, we harness our collective strength to empower you to shape your future with confidence through professional growth, personal fulfillment and an inclusive culture. Learn more at ey.com/us/careers.

• The salary range for this job is:
  • New York City, Boston, and Washington DC Metro Areas, Washington State, and Southern California offices - $92,900 to $153,900
  • Bay Area California offices - $96,000 to $160,500
  • All other offices locations in the US, including Sacramento - $77,500 to $140,900
• Individual salaries within these ranges are determined through a wide variety of factors including but not limited to education, experience, knowledge, skills and geography. In addition, our Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options.

Are you ready to shape your future with confidence? Apply today.

• To make the most of your application experience, please limit yourself to two applications within a six-month period.
• EY accepts applications for this position on an on-going basis.
• For those living in California, please click here for additional information.
• At EY, our values set the foundation for how we work and the behaviors we expect of our people. Any misrepresentation or falsification of information or lack of integrity at any point in the recruiting process may result in withdrawal of your candidacy, revocation of an offer or immediate termination of employment.

EY | Building a better working world

EY is building a better working world by creating new value for clients, people, society and the planet, while building trust in capital markets.

Enabled by data, AI and advanced technology, EY teams help clients shape the future with confidence and develop answers for the most pressing issues of today and tomorrow.

EY teams work across a full spectrum of services in assurance, consulting, tax, strategy and transactions. Fueled by sector insights, a globally connected, multi-disciplinary network and diverse ecosystem partners, EY teams can provide services in more than 150 countries and territories.

All in to shape the future with confidence.

EY provides equal employment opportunities to applicants and employees without regard to race, color, religion, age, sex, sexual orientation, gender identity/expression, pregnancy, genetic information, national origin, protected veteran status, disability status, or any other legally protected basis, including arrest and conviction records, in accordance with applicable law.

EY is committed to providing reasonable accommodation to qualified individuals with disabilities including veterans with disabilities. If you have a disability and either need assistance applying online or need to request an accommodation during any part of the application process, please call 1-800-EY-HELP3, select Option 2 for candidate related inquiries, then select Option 1 for candidate queries and finally select Option 2 for candidates with an inquiry which will route you to EY’s Talent Shared Services Team (TSS) or email the TSS at [email protected].