{"id":4303545,"url":"https://alion.io/job/ey-cyber-managed-services-software-engineer-privileged-access-management-senior","title":"Cyber Managed Services - Software Engineer - Privileged Access Management - Senior","company":{"id":2859,"name":"EY","domain":"ey.com","url":"https://alion.io/company/ey-com","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":null},"role":"Backend","role_family":"Backend","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Jacksonville, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":92900,"max":153900,"currency":"USD","period":"year","gross":null,"usd_annual":153900},"salary_estimate":null,"experience_years_min":6,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Agile","optional":false},{"name":"Angular","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"Confluence","optional":false},{"name":"CyberArk","optional":false},{"name":"Delinea","optional":false},{"name":"Git","optional":false},{"name":"JavaScript","optional":false},{"name":"Jira","optional":false},{"name":"Kubernetes","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"Spring Boot","optional":false},{"name":"TypeScript","optional":false},{"name":".NET","optional":true},{"name":"Azure AKS","optional":true},{"name":"C#","optional":true},{"name":"Chef","optional":true},{"name":"CodeQL","optional":true},{"name":"Datadog","optional":true},{"name":"Docker","optional":true},{"name":"GitHub","optional":true},{"name":"HashiCorp Vault","optional":true},{"name":"Java","optional":true},{"name":"Mend","optional":true},{"name":"Prometheus","optional":true},{"name":"SonarQube","optional":true}],"status":"live","first_seen_at":"2026-11-14T05:17:46Z","employer_posted_date":"2026-11-13","last_verified_at":"2026-11-14T05:17:46Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Location: Dallas, Alpharetta, Charlotte, Jacksonville, and San Antonio\nAt EY, we’re all in to shape your future with confidence.\nWe’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world.\nPosition Summary\nThe role will design, develop, test, deploy, and support API- and event-driven services that automate privileged-account onboarding, vaulting, validation, membership management, and related self-service workflows across CyberArk, Delinea, and HashiCorp platforms. The engineer will work within an integrated product team and contribute across the software delivery lifecycle, from solution design and API contracts through production readiness and operational support.\nKey Responsibilities\nDesign and implement backend APIs, connectors, and workflow services supporting privileged-account onboarding, interactive account vaulting, safe creation and lookup, account lifecycle actions, and privileged-role membership updates.\nEnhance and maintain the Interactive Account Onboarding API and Interactive Vaulting Connector, including API-contract changes, queue-message processing, validation endpoints, and integration with PAM platforms.\nDevelop resilient integrations using REST APIs, Microsoft Graph, Azure Service Bus queues and topics, and microservice or event-driven patterns.\nTranslate business and technical requirements into solution designs, API contracts, user stories, test scenarios, and production-ready code.\nBuild automated unit, integration, and end-to-end tests, including positive and negative scenarios; support system, regression, disaster-recovery, and production validation.\nSupport source-code cleanup, configuration externalization, secure secrets handling, CI/CD deployment, release planning, and controlled promotion through non-production and production environments.\nTroubleshoot application, integration, data, and deployment issues using logs and observability tools; implement appropriate retry, error-handling, and resiliency patterns.\nPartner with product owners, architects, UX, DevOps, AccessHub, PAM platform teams, infrastructure teams, and other stakeholders to deliver end-to-end workflow outcomes.\nCreate and maintain technical documentation, implementation procedures, diagrams, test evidence, and operational support materials.\nParticipate in Agile ceremonies, code reviews, backlog refinement, sprint planning, demonstrations, and continuous-improvement activities.\nRequired Qualifications\nBachelor’s degree in computer science, engineering, information systems, cybersecurity, or a related field, or equivalent practical experience.\nApproximately 6-9 years of software engineering experience, with strong recent hands-on backend development.\nProficiency in Java and Spring Boot; working knowledge of Python and modern web technologies such as Angular, TypeScript, or JavaScript.\nExperience designing and consuming REST APIs, building microservices, and implementing asynchronous or event-driven integrations.\nExperience with Microsoft Azure, Azure Service Bus, containerized applications, and Kubernetes-based deployment environments.\nStrong understanding of authentication, authorization, service accounts, Active Directory groups, secrets management, and secure application integration.\nHands-on experience with automated testing and code-quality practices; ability to diagnose failures across application, API, queue, and infrastructure layers.\nExperience using Git-based workflows, CI/CD pipelines, and Agile delivery tools such as Jira and Confluence.\nStrong written and verbal communication skills and the ability to collaborate across engineering, product, security, and operations teams.\nPreferred Qualifications\nExperience delivering privileged access management solutions using CyberArk, Delinea Secret Server, HashiCorp Vault, or comparable platforms.\nFamiliarity with PAM concepts including safes, privileged accounts, shared accounts, interactive accounts, command elevation, account onboarding, vaulting, and credential lifecycle management.\nExperience with Docker, AKS, AVI GSLB, ARM templates, Chef, Groovy, Datadog, Prometheus, SonarQube, GitHub CodeQL, Mend, or GitHub Advanced Security.\nExperience with Karate or similar API test-automation frameworks and with automated end-to-end testing.\nExperience in a regulated financial-services environment and knowledge of secure software development, change management, and production-readiness controls.\nAbility to review existing code and architecture, identify gaps, and independently deliver enhancements with limited ramp-up time.\nTechnology Environment\nApplication development: Java 21, Spring Boot, Python, Angular, TypeScript, JavaScript, micro frontends, and .NET for selected legacy components.\nCloud and integration: Microsoft Azure, AKS, Docker, Azure Service Bus, REST APIs, microservices, event-driven architecture, and Microsoft Graph.\nDelivery and operations: CI/CD pipelines, infrastructure and configuration automation, GitHub-based code management, observability, automated testing, and DevSecOps tooling.\nPAM ecosystem: CyberArk, Delinea Secret Server, HashiCorp Vault, AccessHub, and related onboarding and provisioning platforms.\nSuccess Measures\nReliable, secure, and maintainable workflow services delivered against sprint and release commitments.\nHigh automated test coverage and successful end-to-end validation across integrated systems.\nReduced manual effort and improved turnaround time for privileged-access requests.\nClear production-readiness evidence, operational documentation, and timely resolution of defects.\nEffective collaboration with stakeholders and consistent adherence to security, architecture, and engineering standards.\nWhat we offer you\nAt EY, we harness our collective strength to empower you to shape your future with confidence through professional growth, personal fulfillment and an inclusive culture. Learn more at ey.com/us/careers.\nThe salary range for this job is:New York City, Boston, and Washington DC Metro Areas, Washington State, and Southern California offices - $92,900 to $153,900\nBay Area California offices - $96,000 to $160,500\nAll other offices locations in the US, including Sacramento - $77,500 to $140,900\n\nIndividual salaries within these ranges are determined through a wide variety of factors including but not limited to education, experience, knowledge, skills and geography. In addition, our Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options.\nAre you ready to shape your future with confidence? Apply today.\nTo make the most of your application experience, please limit yourself to two applications within a six-month period.\nEY accepts applications for this position on an on-going basis.\nFor those living in California, please click here for additional information.\nAt EY, our values set the foundation for how we work and the behaviors we expect of our people. Any misrepresentation or falsification of information or lack of integrity at any point in the recruiting process may result in withdrawal of your candidacy, revocation of an offer or immediate termination of employment.\nEY | Building a better working world\nEY is building a better working world by creating new value for clients, people, society and the planet, while building trust in capital markets.\nEnabled by data, AI and advanced technology, EY teams help clients shape the future with confidence and develop answers for the most pressing issues of today and tomorrow.\nEY teams work across a full spectrum of services in assurance, consulting, tax, strategy and transactions. Fueled by sector insights, a globally connected, multi-disciplinary network and diverse ecosystem partners, EY teams can provide services in more than 150 countries and territories.\nAll in to shape the future with confidence.\nEY provides equal employment opportunities to applicants and employees without regard to race, color, religion, age, sex, sexual orientation, gender identity/expression, pregnancy, genetic information, national origin, protected veteran status, disability status, or any other legally protected basis, including arrest and conviction records, in accordance with applicable law.\nEY is committed to providing reasonable accommodation to qualified individuals with disabilities including veterans with disabilities. If you have a disability and either need assistance applying online or need to request an accommodation during any part of the application process, please call 1-800-EY-HELP3, select Option 2 for candidate related inquiries, then select Option 1 for candidate queries and finally select Option 2 for candidates with an inquiry which will route you to EY’s Talent Shared Services Team (TSS) or email the TSS at .","description_format":"text","description_chars":8905,"description_truncated":false,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Identity Management","Financial Advisory, Valuation & Restructuring","Management Consulting","Tax Advisory & Preparation"],"lifecycle":[{"event":"open","at":"2026-11-14T05:17:46Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":0,"expected_fill_days":28,"reasons":["conf:0","velocity","win:early","comp:brand"],"computed_at":"2026-11-14T05:58:10Z"},"pay":{"stated_usd_annual":153900,"is_top_pay":false},"html_url":"https://alion.io/job/ey-cyber-managed-services-software-engineer-privileged-access-management-senior","json_url":"https://alion.io/job/ey-cyber-managed-services-software-engineer-privileged-access-management-senior.json","meta":{"generated_at":"2026-11-14T13:05:24Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":13153,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-15T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2859},"rest":"https://alion.io/mcp/rest/get_company?id=2859"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fey-cyber-managed-services-software-engineer-privileged-access-management-senior"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fey-cyber-managed-services-software-engineer-privileged-access-management-senior"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fey-cyber-managed-services-software-engineer-privileged-access-management-senior"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ey-cyber-managed-services-software-engineer-privileged-access-management-senior\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fey-cyber-managed-services-software-engineer-privileged-access-management-senior"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4303545}},{"tool":"search_jobs","arguments":{"company":"ey.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4303545},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}