{"id":190307,"url":"https://alion.io/job/lam-research-information-security-engineer-6-2","title":"Lead CyberArk Engineer","company":{"id":58649,"name":"Lam Research","domain":"lamresearch.com","url":"https://alion.io/company/lam-research","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Eightfold","truth_index":{"grade":"C","score":57,"open_postings":672,"ghost_share":0.438,"stale_share":0.057,"repost_share":0.722,"time_to_fill_p50_days":71,"computed_at":"2026-10-22T06:10:10Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Fremont, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":137000,"max":287000,"currency":"USD","period":"year","gross":null,"usd_annual":287000},"salary_estimate":null,"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CyberArk","optional":false},{"name":"Least Privilege","optional":false},{"name":"PKI","optional":false},{"name":"Platform Engineering","optional":false},{"name":"Zero Trust","optional":false},{"name":"Sentry","optional":true}],"status":"live","first_seen_at":"2026-08-02T20:41:04Z","employer_posted_date":"2026-10-20","last_verified_at":"2026-10-22T20:47:59Z","board_verified":true,"closed_at":null,"days_open":81,"trust":{"level":"ok","repost_count":1,"flags":[],"days_open":80},"description":"The group you’ll be a part of\nThe Global Information Systems Group is dedicated to the success of Lam through providing best-in-class and innovative information system solutions and services. Together, we support users globally with data, information, and systems to achieve their business objectives.\nThe impact you’ll make\nThe Lead CyberArk / Privileged Access Management Engineer is responsible for the architecture, engineering, delivery, and operational excellence of enterprise privileged access management, secrets management, privileged identity security, PKI, and certificate services. The role requires a seasoned security engineering professional with a consistent track record of delivering secure, scalable, production-grade solutions in complex global environments.\nWhat you’ll do\nPrivileged Access Management Architecture & Engineering\nLead CyberArk PAM architecture, design, and platform strategy.\nEstablish standards, deployment methods, and support processes.\nDesign scalable PAM solutions for users, applications, vendors, and OT environments.\nAlign PAM initiatives with Zero Trust and cybersecurity objectives.\nCyberArk Platform Administration & Engineering\nImplement and support CyberArk PAM, PSM, CPM, EPM, and password management services.\nManage onboarding and lifecycle of privileged accounts and systems.\nDevelop policies for vaulting, credential rotation, and session monitoring.\nAutomate onboarding, reporting, and compliance activities.\nSecrets Management & Machine Identity Security\nLead CyberArk Secrets Manager deployment and support.\nDesign secure secret management for applications, cloud platforms, and DevOps pipelines.\nEstablish standards for credential rotation, authentication, and machine identities.\nPartner with engineering teams to eliminate embedded credentials.\nWhat you'll do. con't\nPKI & Certificate Services\nManage enterprise PKI and certificate service platforms.\nOversee certificate lifecycle processes, including issuance, renewal, and revocation.\nIntegrate certificate management with cloud, infrastructure, and application environments.\nDefine governance for certificates, keys, and cryptographic standards.\nSecurity, Compliance & Governance\nEnsure PAM, secrets, and PKI platforms meet security and compliance requirements.\nImplement least-privilege, JIT access, and Zero Trust controls.\nPartner with audit, risk, and security teams on remediation efforts.\nSupport audits through reporting, evidence collection, and control validation.\nWhat you'll do, con't\nPlatform Reliability & Operational Excellence\nResolve complex PAM, authentication, and certificate-related issues.\nMaintain monitoring, reporting, backup, and disaster recovery capabilities.\nImprove platform performance, scalability, and security.\nCreate and maintain technical documentation and operational procedures.\nTechnical Leadership & Solution Delivery\nLead delivery from requirements through deployment and operational support.\nMentor engineers and promote engineering best practices.\nSupport cybersecurity, cloud, and modernization initiatives.\nInfluence architecture decisions across security, identity, infrastructure, and application teams.\nWho we’re looking for\nBachelor's degree in Computer Science, Information Systems, Computer Engineering, Cybersecurity, or a related technical discipline required.\nMaster's degree in Information Security, Cybersecurity, Engineering, or a related discipline preferred.\n10+ years of experience in cybersecurity, Identity and Access Management, infrastructure security, platform engineering, cloud security, or related technical disciplines.\n7+ years of hands-on experience implementing and supporting CyberArk or comparable privileged access management platforms.\nDemonstrated experience delivering enterprise privileged access management, secrets management, PKI, certificate lifecycle management, and machine identity security services at global scale.\nProven experience designing and operating highly available, mission-critical security platforms that support infrastructure, applications, cloud, manufacturing, and business operations.\nExperience leading PAM modernization initiatives, privileged identity governance programs, certificate management transformations, secrets management deployments, or cloud security projects.\nProven history of successfully delivering complex engineering projects from architecture through production implementation, transition to operations, and ongoing lifecycle support.\nExperience mentoring engineers and establishing technical standards within large engineering organizations without requiring direct people-management responsibility.\nPreferred qualifications\nCyberArk Certified Delivery Engineer (CDE)\nCyberArk Certified Defender (CCD)\nCyberArk Certified Sentry (CCS)\nCertified Information Systems Security Professional (CISSP)\nCertified Information Security Manager (CISM)\nMicrosoft Certified: Cybersecurity Architect Expert\nGIAC security certifications such as GSEC, GCSA, or related credentials\nPKI, cryptography, cloud security, or machine identity security certifications\nOur commitment\nWe believe it is important for every person to feel valued, included, and empowered to achieve their full potential. By bringing unique individuals and viewpoints together, we achieve extraordinary results.\nLam Research (\"Lam\" or the \"Company\") is an equal opportunity employer. Lam is committed to and reaffirms support of equal opportunity in employment and non-discrimination in employment policies, practices and procedures on the basis of race, religious creed, color, national origin, ancestry, physical disability, mental disability, medical condition, genetic information, marital status, sex (including pregnancy, childbirth and related medical conditions), gender, gender identity, gender expression, age, sexual orientation, or military and veteran status or any other category protected by applicable federal, state, or local laws. It is the Company's intention to comply with all applicable laws and regulations. Company policy prohibits unlawful discrimination against applicants or employees.\nLam offers a variety of work location models based on the needs of each role. Our hybrid roles combine the benefits of on-site collaboration with colleagues and the flexibility to work remotely and fall into two categories - On-site Flex and Virtual Flex. ‘On-site Flex’ you’ll work 3+ days per week on-site at a Lam or customer/supplier location, with the opportunity to work remotely for the balance of the week. ‘Virtual Flex’ you’ll work 1-2 days per week on-site at a Lam or customer/supplier location, and remotely the rest of the time.\nSalary\nCA San Francisco Bay Area Salary Range for this position: $137,000.00 - $287,000.00.\nThe above salary range for this position is relevant to applicants that reside or work onsite in the California, San Francisco Bay Area only. Salary offers will depend on factors that include the location you work from, your level, education, training, specific skills, years of experience and comparison to other employees already in this role. Actual salary may vary from salary offered due to numerous factors including but not limited to unpaid time off, unpaid leave, company mandated shutdown, and other relevant factors.\nOur Perks and Benefits\nAt Lam, our people make amazing things possible. That’s why we invest in you throughout the phases of your life with a comprehensive set of outstanding benefits.","description_format":"text","description_chars":7454,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security","Semiconductor Equipment"],"lifecycle":[{"event":"open","at":"2026-09-02T12:44:23Z"},{"event":"close","at":"2026-09-03T09:28:40Z"},{"event":"reopen","at":"2026-10-20T19:48:37Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 233 · green card filings: 85","filings_12m":233,"filings_prev_12m":267,"green_card_filings_12m":85,"median_offered_wage_usd":137500,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":6}],"liveness":{"score":35,"band":"fade","label":"Fading","p_open":1,"p_active":0.795,"p_room":0.44,"age_days":80,"expected_fill_days":71,"reasons":["conf:0","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-22T06:10:10Z"},"pay":{"stated_usd_annual":287000,"is_top_pay":true},"html_url":"https://alion.io/job/lam-research-information-security-engineer-6-2","json_url":"https://alion.io/job/lam-research-information-security-engineer-6-2.json","meta":{"generated_at":"2026-10-22T23:42:10Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":9707,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-23T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":58649},"rest":"https://alion.io/mcp/rest/get_company?id=58649"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Flam-research-information-security-engineer-6-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Flam-research-information-security-engineer-6-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Flam-research-information-security-engineer-6-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/lam-research-information-security-engineer-6-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Flam-research-information-security-engineer-6-2"}]}