Senior Privileged Access Management(PAM) Security Engineer - C14

About Citi:

Citi, the leading global bank, has approximately 200 million customer accounts and does business in more than 160 countries and jurisdictions. Citi provides consumers, corporations, governments, and institutions with a broad range of financial products and services, including consumer banking and credit, corporate and investment banking, securities brokerage, transaction services, and wealth management.

As a bank with a brain and a soul, Citi creates economic value that is systemically responsible and, in our clients', best interests. As a financial institution that touches every region of the world and every sector that shapes your daily life, our Enterprise Operations & Technology teams are charged with a mission that rivals any large tech company. Our technology solutions are the foundations of everything we do from keeping the bank safe, managing global resources, and providing the technical tools our workers need to be successful to designing our digital architecture and ensuring our platforms provide a first-class customer experience. We reimagine client and partner experiences to deliver excellence through secure, reliable, and efficient services.

Our commitment to diversity includes a workforce that represents the clients we serve from all walks of life, backgrounds, and origins. We foster an environment where the best people want to work. We value and demand respect for others, promote individuals based on merit, and ensure opportunities for personal development are widely available to all. Ideal candidates are innovators with well-rounded backgrounds who bring their authentic selves to work and complement our culture of delivering results with pride. If you are a problem solver who seeks passion in your work, come join us. We'll enable growth and progress together.

About the Team:

The role falls under Citi's Information Security Office's Secrets Engineering team, with global responsibilities to engineer / architect Privileged Access Management (PAM), IAM (Identity & Access Management) and PIM (Privileged Identity Management) solutions. This is an emerging space which addresses the core issues of controlling access and managing the life cycle of accounts that have elevated privileges. The footprint of the number of accounts under management is continuously growing and it is the responsibility of the team to ensure that it rises to the challenge and ensure that we can establish a balance between security and operational needs of the firm.

Responsibilities:

What the role covers:

• Contributing to the architecture, design, development, test, and operational excellence of CyberArk product tooling

• Spearhead architecting and implementing the software engineering patterns for secure secrets onboarding and consumption through automated workflows

• Optimizing existing and developing new end to end automation workflows with Engineering excellence and Developer experience at the forefront

• Implementing the Privileged Access Management IT Strategy and leading the team initiatives in meeting the project delivery timelines

• Work with operational product owners and various peer teams to integrate Secure Password Vaulting systems and related technologies with other Citi platforms to protect and manage the credentials of mission critical systems

• Coding and scripting the customization of the CyberArk PIM products

• Perform product evaluation, testing and certification of secure vaulting systems

• Ensure that all PIM security products meet or exceed Citi internal and regulatory requirements

• Produce documentation of processes and procedures for the usage of the product

• Follow the Enterprise Technology Life Cycle in the development of all security tools related to vaulting services

• Work with the vendor to identify product optimizations and implement future enhancements

• Mentoring junior engineers and knowledge sharing with partner teams to increase adoption

Qualifications:

• 10+ yrs of relevant work experience

• Motivated self-starter with excellent interpersonal, oral and written communications skills

• Subject matter expert in privileged access Password/Credential Vaulting technologies

• Preferred: CyberArk suite of products - PAS (Privileged Account Security), PSM (Privileged Session Manager) and AAM (Application Access Manager)

• Experienced in Coding Languages: Java, Dot Net

• Solid foundation in Software Testing and Test Automation

• Experience with DevOps, CI/CD, and agile methodologies

• Scripting languages: PowerShell, T-SQL, SQL, PLSQL, Unix shell, Perl,

• Experience developing secure microservices using REST, TLS, and OpenAPI

• Security best practices and Identity access management in Secrets space a bonus

• Experience with public cloud technologies such as AWS, Google Cloud Platform or Azure is desired

• Windows Operating Systems, Unix Operating Systems, Red Hat Enterprise Linux

• Databases: Oracle, Mongo, Microsoft SQL Server

• Hands on with RPM or other packaging mechanisms is nice to have

• Encryption algorithms, PKI, and Active Directory domain services

• CISSP preferred

Competencies:

• Well versed in Product and Software development/engineering life cycle processes

• Aptitude for innovation and troubleshooting

• Understand and adopt beneficial industry trends

• Be receptive to a global work environment

Education:

Bachelor's degree/University degree or equivalent experience

Job Family Group:
Technology

Job Family:
Systems & Engineering

Time Type:
Full time

Primary Location:
Irving Texas United States

Primary Location Full Time Salary Range:
$156,160.00 - $234,240.00

In addition to salary, Citi's offerings may also include, for eligible employees, discretionary and formulaic incentive and retention awards. Citi offers competitive employee benefits, including: medical, dental & vision coverage; 401(k); life, accident, and disability insurance; and wellness programs. Citi also offers paid time off packages, including planned time off (vacation), unplanned time off (sick leave), and paid holidays. For additional information regarding Citi employee benefits, please visit citibenefits.com. Available offerings may vary by jurisdiction, job level, and date of hire.

Anticipated Posting Close Date:
Jun 01, 2025

Citi is an equal opportunity employer, and qualified candidates will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other characteristic protected by law.

If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review Accessibility at Citi.

View Citi's EEO Policy Statement and the Know Your Rights poster.