Apply Now

Full Stack .NET/Privileged Access Platform Engineer

Hybrid in Alpharetta, GA, US • Posted 5 hours ago • Updated 5 hours ago

Full Time

No Travel Required

Hybrid

Depends on Experience

TEKEngineersInc

Fitment

Dice Job Match Score™

To see how well you match this job, please log in or create an account.

Once logged in, be sure to complete your profile to get the most accurate match score.

🔢 Crunching numbers...

Job Details

Skills

.NET
API Management
ASP.NET
Automated Testing
Cloud Computing
AngularJS
Ansible
Auditing
Concurrent Computing
Authentication
Authorization
Computer Networking
Configuration Management Database
Continuous Delivery
Continuous Integration
CyberArk
Failover
GRID
Hierarchical Storage Management
Microsoft Windows
OWASP
Software Development Methodology
Orchestration
PIM
RBAC
Recovery
Management
Microsoft
Microsoft Azure
OAuth
OIDC
IT Service Management
Identity Management
Instrumentation
Interfaces
SQL Azure
Security QA
Software Engineering
Threat Modeling
Training
Workflow
C#

.NET
API Management
ASP.NET
Automated Testing
Cloud Computing
AngularJS
Ansible
Auditing
Concurrent Computing
Authentication
Authorization
Computer Networking
Configuration Management Database
Continuous Delivery
Continuous Integration
CyberArk
Failover
GRID
Hierarchical Storage Management
Microsoft Windows
OWASP
Software Development Methodology
Orchestration
PIM
RBAC
Recovery
Management
Microsoft
Microsoft Azure
OAuth
OIDC
IT Service Management
Identity Management
Instrumentation
Interfaces
SQL Azure
Security QA
Software Engineering
Threat Modeling
Training
Workflow
C#

Summary

Job Title: Full Stack .NET/Privileged Access Platform Engineer

Location: Alpharetta, GA 3 days/week onsite

Duration: 12 Months

Overview Hands-on senior developer joining the Privileged Access Management team to build a secure privileged-access orchestration and integration platform connecting ITSM/CMDB systems, privileged access management tooling, Microsoft identity and endpoint services, and enterprise audit platforms. This role does not require prior domain expertise in privileged access management tools (e.g., CyberArk) — training/context will be provided. Strong full stack .NET development skills are the priority.

Responsibilities

Develop production-grade services using C#/.NET and ASP.NET Core, including REST APIs, background workers, policy/orchestration services, event-driven workflows, and reconciliation processes.
Build front-end administrative interfaces using Angular, supporting privileged-access request, approval, and monitoring workflows.
Build orchestration and integration workflows across privileged access management platforms (session management, endpoint privilege management, and automation components), Microsoft Entra PIM, Intune, Windows LAPS, Microsoft Graph, Windows 365, ITSM/CMDB systems, and endpoint- management/automation platforms.
Implement policy-driven authorization workflows that evaluate user identity, device identity, role eligibility, business approval, requested operation, target scope, risk level, device posture, and permitted duration before privileged actions are executed.
Develop orchestration logic that determines the correct execution mechanism (privileged session brokering, endpoint elevation, PIM activation, endpoint-management actions, credential recovery, or other approved mechanisms) while preventing overlapping or conflicting control-plane behavior.
Design Azure-hosted solutions using services such as Azure App Service, Container Apps or AKS, API Management, Service BEvent Grid, Azure SQL, Key Vault/Managed HSM, Managed Identities, Application Insights, and private networking.
Implement secure multi-tenant and multi-region application patterns: tenant isolation, scoped workload identities, per-environment secrets/keys, authorization boundaries, replay protection, idempotency, and resilient failover.
Engineer reliable orchestration workflows with comprehensive instrumentation, including activation, extension, expiry, revocation, credential rotation, reconciliation, stale-access cleanup, dependency-failure handling, retries, and verification that privileged access was actually removed across downstream systems.
Build scalable asynchronous and bulk-operation capabilities: queues, bounded concurrency, target manifests, canary execution, per-target result tracking, cancellation, retries, and partial-failure handling.
Implement comprehensive security and audit telemetry capturing requester, approver, operator, target, requested action, policy decision, timestamps, downstream transaction/session identifiers, expiration/revocation, and execution outcome.
Apply secure software engineering practices: OAuth 2.0/OIDC, workload identity federation, Managed Identities, certificate-based authentication, RBAC, least privilege, OWASP controls, threat modeling, secrets management, secure SDLC, and automated security testing.
Build automated testing covering unit, integration, contract, authorization-boundary, cross-tenant, concurrency, failover, revocation, reconciliation, and security scenarios, supported by CI/CD and Infrastructure-as-Code (using Ansible for automation) with enterprise-standard tooling. Requirements
Strong hands-on experience with C#/.NET, ASP.NET Core, and Angular in a full stack capacity.
Experience building and operating large-scale, cloud-native (Azure-preferred) systems.
Experience with automation/IaC tooling; Ansible experience is a plus.
Familiarity with identity, access management, or security-adjacent engineering is helpful but not required — no prior CyberArk or PAM-specific domain knowledge is needed.
Comfortable working in a large, complex enterprise environment with multiple integrated systems.

Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.

Dice Id: PTP88pCqqBqe0nD
Position Id: 184
Posted 5 hours ago

Company Info

About TEKEngineersInc

Founded in 2010, TEKEngineers stands out as a prominent global IT services and solutions company. Our core focus revolves around delivering comprehensive enterprise digital transformation and modernization solutions spanning diverse business verticals. Collaborating closely with our clients, we drive innovation, reimagine workflows, and facilitate transformative experiences, enabling businesses to maintain a competitive edge in today's dynamic landscape.

Within TEKEngineers, we actively cultivate an entrepreneurial mindset among our employees, encouraging them to thrive. Our commitment to inclusivity, integrity, and providing opportunities for promising growth underscores our pledge to accelerate your career within an environment that values both personal and professional development.

Go to company profile

Contact the job poster

krishna murthy

Recruiter @ TEKEngineersInc

View Profile

Create job alert

Never miss an opportunity! Create an alert based on the job you applied for.

Similar Jobs

CyberArk/PAM

Hybrid in Alpharetta, Georgia

•

Today

Job Title: CyberArk/Azure Privileged Access Engineer Location: Alpharetta, 3 days/week onsite Duration: Long Term Overview We're looking for a hands-on Senior Privileged Access Engineer to design, configure, integrate, and troubleshoot CyberArk privileged access capabilities within a large-scale, enterprise Microsoft cloud environment. This role sits at the intersection of PAM, identity, and endpoint management, and will play a key part in advising on architecture/design while also directly exe

Easy Apply

Full-time

Depends on Experience

Search all similar jobs

More jobs at TEKEngineersInc in Alpharetta, GA