Senior Security Engineer

Kforce has a client in San Jose, CA that is seeking a Senior Security Engineer. Key Responsibilities:

• Design, operate, and continuously improve enterprise PAM capabilities across network devices, servers, cloud resources, Kubernetes, and administrative platforms
• Own privileged account onboarding, credential vaulting and rotation, session management, access reviews, recertification, and break-glass processes
• Implement least-privilege, RBAC, just-in-time, and just-enough access; identify unmanaged accounts, shared credentials, and excessive permissions
• Provide operational ownership of PAM platforms, including health, upgrades, integrations, troubleshooting, monitoring, incident support, and recovery runbooks
• Secure administrative access to routers, switches, firewalls, appliances, servers, and other infrastructure across hybrid cloud and data center environments
• Account for real-world operational needs including maintenance, fleet changes, disaster recovery, and production incident response
• Build automation using Python, Bash, APIs, and Infrastructure-as-Code tools such as Terraform to reduce manual PAM operations and enforce controls consistently
• Automate discovery, onboarding, access provisioning, entitlement validation, credential rotation, control verification, and reporting
• Integrate PAM with identity providers, CI/CD systems, cloud platforms, Kubernetes, SIEM, monitoring, vulnerability-management, and other security tooling
• Define appropriate boundaries and integrations between PAM, secrets management, PKI, and identity-management platforms, including secure credential distribution and rotation
• Act as a PAM subject-matter expert and work closely with Security, SRE, Infrastructure, Networking, DevOps, Identity, and Software Engineering teams
• Bachelor's degree in Computer Science, Information Security, Engineering, or equivalent practical experience
• 7-10 years of experience in security engineering, infrastructure security, identity security, PAM, or related disciplines
• Strong hands-on experience implementing and operating enterprise PAM solutions in complex, large-scale production environments
• Demonstrated ability to work across multiple engineering organizations and drive security initiatives through collaboration

• Deep understanding of privileged account lifecycle management, credential vaulting/rotation, privileged sessions, JIT/JEA, RBAC, break-glass access, service accounts, and entitlement reviews
• Experience with PAM platforms such as CyberArk, BeyondTrust, Delinea, HashiCorp Vault, or similar technologies
• Strong knowledge of authentication, authorization, IAM, least privilege, Linux administration, and secure infrastructure access
• Experience with AWS, Azure, or GCP; Docker/Kubernetes; Hybrid cloud/data center environments; Python/Bash; Terraform; APIs; and security integrations
• Understanding of networking and infrastructure security, including PKI, X.509 certificates, SSH keys, cryptography, secrets management, SIEM, monitoring, and vulnerability-management tooling

• Experience in a networking company, network infrastructure organization, or large-scale distributed environment such as Cisco Meraki
• Experience managing privileged access across large fleets of network devices, servers, Kubernetes clusters, and cloud resources
• Experience with Microsoft Entra ID or Okta, and technologies such as TACACS+, RADIUS, SSH, or certificate-based authentication
• Familiarity with Zero Trust, machine identity, internal security platforms, SOC 2, ISO 27001, BSI C5, Agile/DevSecOps/SRE practices, and relevant security or PAM certifications