Lead CyberArk Engineer

Lam Research

Confirmed live today High trust
Hybrid

Quick summary

Work type
Hybrid
Location
Fremont, CATualatin, ORPhoenix, AZ
Salary
$137,000–$287,000 / yr
Posted
6 days ago
Freshness
Confirmed live today
Closes
Apr 18, 2027

Market check

Salary context

Above market

How this pay compares to similar roles

Similar $186k
This role $212k
$113k $306k
below market most similar roles pay here above market

This role pays more than 74% of similar roles. Most pay $154,600–$216,987 — the blue band above. At the midpoint, this role pays about $212k versus about $186k for comparable roles.

Based on 240 similar postings.

Employer

About Lam Research

Lam Research Corporation is a leading American supplier of wafer-fabrication equipment and services to the global semiconductor industry.

Lam Research currently has 137 open roles on FindRole.

Listed pay typically runs $114,000–$253,000 across 82 roles with salary data.

Most-posted roles

View all roles at Lam Research

At a glance

TL;DR · Lead CyberArk Engineer

The Lead CyberArk Engineer joins the Global Information Systems Group to lead the architecture, engineering, and operational excellence of enterprise privileged access management, secrets management, and PKI services. This role involves designing scalable solutions for users, applications, and OT environments while aligning initiatives with Zero Trust objectives. Key responsibilities include implementing CyberArk PAM, PSM, CPM, EPM, and password management services, managing certificate lifecycles, and securing machine identities across cloud and DevOps pipelines. The engineer will automate onboarding, establish cryptographic standards, and ensure compliance through least-privilege and JIT access controls. Required expertise includes CyberArk platforms, PKI, and infrastructure security. The position solves complex security problems by providing production-grade, mission-critical identity security and secrets management for global manufacturing, business operations, and cloud infrastructure environments.

What you'll do

  • Lead CyberArk PAM architecture, design, and platform strategy for global enterprise environments.
  • Implement and support CyberArk PAM, PSM, CPM, EPM, and password management services.
  • Design and manage secure secrets management for applications, cloud platforms, and DevOps pipelines.
  • Manage enterprise PKI and certificate lifecycle processes including issuance, renewal, and revocation.
  • Implement least-privilege, JIT access, and Zero Trust controls to meet security compliance.
  • Maintain platform reliability through monitoring, reporting, backup, and disaster recovery capabilities.
  • Lead technical delivery from requirements through deployment and provide ongoing operational support.
  • Mentor engineers and establish technical standards for security and identity infrastructure.

What we're looking for

  • Bachelor's degree in Computer Science, Information Systems, Computer Engineering, Cybersecurity, or a related technical discipline required.
  • Master's degree in Information Security, Cybersecurity, Engineering, or a related discipline (preferred).
  • 10+ years of experience in cybersecurity, Identity and Access Management, infrastructure security, platform engineering, cloud security, or related technical disciplines.
  • 7+ years of hands-on experience implementing and supporting CyberArk or comparable privileged access management platforms.
  • Demonstrated experience delivering enterprise privileged access management, secrets management, PKI, certificate lifecycle management, and machine identity security services at global scale.
  • Proven experience designing and operating highly available, mission-critical security platforms for infrastructure, applications, cloud, manufacturing, and business operations.
  • Experience leading PAM modernization, privileged identity governance, certificate management transformations, secrets management deployments, or cloud security projects.
  • Experience mentoring engineers and establishing technical standards within large engineering organizations without requiring direct people-management responsibility.
  • CyberArk Certified Delivery Engineer (CDE), Certified Defender (CCD), or Certified Sentry (CCS) (preferred).
  • CISSP, CISM, Microsoft Certified: Cybersecurity Architect Expert, or GIAC security certifications (preferred).
  • PKI, cryptography, cloud security, or machine identity security certifications (preferred).

More like this

Similar roles

Senior Lead IAM Privileged Access Engineering

Northern Trust

Tempe, AZ 32 days ago
CyberArk Identity & Access Management (IAM) Privileged Access Management (PAM) Secrets Management Active Directory Entra ID Saviynt API MFA NIST FFIEC COBIT Identity Governance & Administration Non-Human Identity Management Session Management Credential Vaulting
7+ yrs exp

IdAM Privileged Access Management Engineer II

Pacific Life

Newport Beach, CA +1 18 days ago $137,610–$168,190
Privileged Access Management (PAM) Identity and Access Management (IAM) CyberArk Delinea Netwrix Active Directory Entra ID Azure Windows Linux API Zero Trust Multi-Factor Authentication Agile ISO NIST Databases Networking
5+ yrs exp Hybrid

IdAM Privileged Access Management Engineer Consultant

Pacific Life

Newport Beach, CA 18 days ago $167,670–$204,930
Privileged Access Management (PAM) Identity and Access Management (IAM) CyberArk Delinea Netwrix Active Directory Entra ID Azure Windows Linux API Zero Trust Multi-Factor Authentication Agile ISO NIST Databases Networking
10+ yrs exp Hybrid

VP, Privileged Secret Server Product Owner

Synchrony

Atlanta, GA +6 34 days ago $155,000–$260,000
Privileged Access Management (PAM) Delinea Secret Server Identity & Access Management (IAM) Zero Trust Just-in-Time (JIT) ITSM SIEM SOAR RBAC MFA SSO Agile Scrum Credential Rotation Behavioral Analytics
10+ yrs exp

Public Key Infrastructure Engineer

Booz Allen Hamilton

Washington, DC +1 43 days ago $86,800–$198,000
Public Key Infrastructure (PKI) Identity and Access Management (IAM) Active Directory Certificate Services Certificate Authority Certificate Lifecycle Management Linux Asymmetric Cryptography Keyfactor Venafi ACME SCEP Zero Trust

Identity and Access Management Specialist

Booz Allen Hamilton

McLean, VA 13 days ago $86,800–$198,000
Identity and Access Management (IAM) Delinea Secret Server CyberArk BeyondTrust AWS Azure SSO MFA LDAP Active Directory Credential Rotation Privileged Session Monitoring API Integration High Availability (HA) Architecture Identity Governance Incident Handling Risk Measurement Change Management