Senior Cyber Security Engineer (IAM/PAM - DevSecOps)

Rackspace Technology is looking for a Senior Cybersecurity & DevSecOps Engineer with expertise in Privileged Access Management (PAM), Identity and Access Management (IAM), and Vulnerability and Patch Management. This role involves designing, implementing, and maintaining security architecture, integrating security into the software development lifecycle, and securing privileged accounts and digital identities. The engineer will embed security controls into CI/CD pipelines, manage PAM/IAM solutions like CyberArk and ForgeRock, and ensure strong overall security posture. Responsibilities include automating security processes, implementing least privilege access, conducting security assessments, and collaborating with various teams to embed identity security throughout the SDLC.

Must Have

• Design, implement, and maintain PAM solutions (e.g. CyberArk)
• Architect and manage IAM solutions, including SSO, MFA, and directory services (e.g. ForgeRock)
• Configure and manage Vulnerability/Patch Management solutions (e.g. Qualys)
• Develop and maintain secure authentication and authorization workflows
• Create automated PAM/IAM processes to integrate with CI/CD pipelines
• Implement privileged session management, recording, and monitoring capabilities
• Design and manage secrets management solutions
• Develop secure coding practices and security requirements for identity-related components
• Create CI/CD pipeline integrations that automate security testing and credential management
• Implement least privilege access models
• Configure and maintain Just-In-Time (JIT) access
• Conduct regular security assessments of PAM/IAM infrastructure
• Automate security controls for identity lifecycle management
• Develop API security governance for identity-related services
• Create and maintain system documentation and security architecture diagrams
• Monitor security events related to privileged access and identity systems
• Collaborate with development, operations, and security teams
• Implement risk-based authentication and authorization mechanisms
• Lead security platforms incident response
• Participate on after-hours On-Call support

Good to Have

• Proficiency in scripting and programming languages (PowerShell, Python, Bash, etc.)
• Experience with other PAM solutions (BeyondTrust, Delinea, etc.)
• Knowledge of Zero Trust architecture implementation
• Familiarity with OAuth 2.0, OIDC, SAML, and SCIM protocols
• Experience with SIEM integration for identity-related events
• Background in security architecture and framework development
• Experience with secrets management solutions (e.g. HashiCorp Vault)
• Knowledge of advanced encryption implementation and key management
• Understanding of biometric authentication technologies
• Experience with web application firewalls (WAF) and API gateways
• Familiarity with GitOps security principles
• Background in identity governance and administration (IGA)
• Experience with user behavior analytics and identity threat detection
• Knowledge of PKI infrastructure and certificate management
• CISSP, CISM, or other advanced security certifications
• Experience with machine identity management and non-human identities