Senior PAM Security Engineer

Job Description:

Senior Security Engineer – Privileged Access Management

Cisco Meraki | Security Development

At Cisco Meraki, we build technology that is simple, secure, and reliable at scale. As part of the Security Development team, you will help protect infrastructure and services supporting millions of customers globally.

We are looking for a Senior Security Engineer with strong Privileged Access Management (PAM) experience who can work across security, networking, infrastructure, SRE, and engineering teams. The ideal candidate has hands-on experience operating PAM platforms, securing privileged access in large-scale production environments, automating controls, and partnering with service owners. Experience in a networking, cloud, or infrastructure company such as Cisco Meraki is strongly preferred.

Key Responsibilities

• Privileged Access Management & Operations
• Design, operate, and continuously improve enterprise PAM capabilities across network devices, servers, cloud resources, Kubernetes, and administrative platforms.
• Own privileged account onboarding, credential vaulting and rotation, session management, access reviews, recertification, and break-glass processes.
• Implement least-privilege, RBAC, just-in-time, and just-enough access; identify unmanaged accounts, shared credentials, and excessive permissions.
• Provide operational ownership of PAM platforms, including health, upgrades, integrations, troubleshooting, monitoring, incident support, and recovery runbooks.
• Network and Infrastructure Security
• Secure administrative access to routers, switches, firewalls, appliances, servers, and other infrastructure across hybrid cloud and data center environments.
• Partner with networking and infrastructure teams to standardize authentication and authorization across large device fleets and integrate PAM with identity and network-access technologies.
• Account for real-world operational needs including maintenance, fleet changes, disaster recovery, and production incident response.
• Security Automation and Tooling
• Build automation using Python, Bash, APIs, and Infrastructure-as-Code tools such as Terraform to reduce manual PAM operations and enforce controls consistently.
• Automate discovery, onboarding, access provisioning, entitlement validation, credential rotation, control verification, and reporting.
• Integrate PAM with identity providers, CI/CD systems, cloud platforms, Kubernetes, SIEM, monitoring, vulnerability-management, and other security tooling.
• Secrets and Machine Identities
• Work with engineering teams to secure service accounts, machine identities, API credentials, SSH keys, certificates, and application secrets.
• Define appropriate boundaries and integrations between PAM, secrets management, PKI, and identity-management platforms, including secure credential distribution and rotation.
• Cross-Team Collaboration & Governance
• Act as a PAM subject-matter expert and work closely with Security, SRE, Infrastructure, Networking, DevOps, Identity, and Software Engineering teams.
• Drive cross-team security initiatives, help service owners adopt controls with minimal production risk, and provide technical guidance, documentation, and training.
• Support audits, architecture reviews, and risk assessments; translate security and compliance requirements into measurable, automated controls and track remediation to closure.

Qualifications

• Bachelor’s degree in Computer Science, Information Security, Engineering, or equivalent practical experience.
• 7–10 years of experience in security engineering, infrastructure security, identity security, PAM, or related disciplines.
• Strong hands-on experience implementing and operating enterprise PAM solutions in complex, large-scale production environments.
• Demonstrated ability to work across multiple engineering organizations and drive security initiatives through collaboration.

Technical Skills

• Deep understanding of privileged account lifecycle management, credential vaulting/rotation, privileged sessions, JIT/JEA, RBAC, break-glass access, service accounts, and entitlement reviews.
• Experience with PAM platforms such as CyberArk, BeyondTrust, Delinea, HashiCorp Vault, or similar technologies.
• Strong knowledge of authentication, authorization, IAM, least privilege, Linux administration, and secure infrastructure access.
• Experience with AWS, Azure, or Google Cloud Platform; Docker/Kubernetes; hybrid cloud/data center environments; Python/Bash; Terraform; APIs; and security integrations.
• Understanding of networking and infrastructure security, including PKI, X.509 certificates, SSH keys, cryptography, secrets management, SIEM, monitoring, and vulnerability-management tooling.

Preferred Qualifications

• Experience in a networking company, network infrastructure organization, or large-scale distributed environment such as Cisco Meraki.
• Experience managing privileged access across large fleets of network devices, servers, Kubernetes clusters, and cloud resources.
• Experience with Microsoft Entra ID or Okta, and technologies such as TACACS+, RADIUS, SSH, or certificate-based authentication.
• Familiarity with Zero Trust, machine identity, internal security platforms, SOC 2, ISO 27001, BSI C5, Agile/DevSecOps/SRE practices, and relevant security or PAM certifications.

What Success Looks Like

A successful Senior Security Engineer in this role will make privileged access centralized, auditable, automated, and operationally reliable—reducing manually managed credentials, improving ownership and visibility, strengthening production controls, and enabling secure access without unnecessary operational friction