Systems Engineer II, PAM

Early Warning Services

Confirmed live yesterday High trust
Hybrid

Quick summary

Work type
Hybrid
Location
Chicago, ILScottsdale, AZ
Salary
$99,000–$121,000 / yr
Posted
89 days ago
Freshness
Confirmed live yesterday

Market check

Salary context

Below market

How this pay compares to similar roles

Similar $145k
This role $110k
$90k most similar roles pay here $184k

This role pays less than 82% of similar roles. Most pay $119,399–$170,000 — the shaded band above. At the midpoint, this role pays about $110k versus about $145k for comparable roles.

Based on 240 similar postings.

Employer

About Early Warning Services

Early Warning Services is a fintech company that operates the Zelle person-to-person payments network, the Paze digital checkout wallet, and Certos fraud prevention and identity risk solutions for financial institutions.

Early Warning Services currently has 64 open roles on FindRole.

Listed pay typically runs $143,500–$183,000 across 60 roles with salary data.

Most-posted roles

View all roles at Early Warning Services

At a glance

TL;DR · Systems Engineer II, PAM

Systems Engineer II - PAM engineers and supports privileged and non-human identity controls across enterprise and cloud platforms. The role involves implementing and maintaining service account lifecycle controls, secrets management automation, certificate lifecycle management, and privileged session governance. Day-to-day responsibilities include managing vault configurations, credential onboarding, automated password rotation, and Just-In-Time access. You will also manage non-human identities, oversee enterprise PKI for certificate issuance and revocation, and develop automation workflows for identity management. The position requires proficiency with PAM platforms like Delinea or CyberArk, secrets tools such as Vault or Secret Server, AWS IAM, and Active Directory. Technical skills include scripting in PowerShell, Python, or Bash, knowledge of REST APIs, and network troubleshooting. This role addresses the critical security challenge of securing privileged access and non-human identities within highly regulated environments like PCI.

What does a Systems Engineer earn?

Median $157425 from 196 postings across 32 companies.

See salary data

What you'll do

  • Implement and support Privileged Access Management (PAM) solutions including vaulting, session control, and Just-In-Time access.
  • Administer secrets management platforms by managing credential onboarding, vault configuration, and automated password rotation.
  • Manage the lifecycle of non-human identities, including provisioning, governance, and deprovisioning for service and workload accounts.
  • Oversee enterprise certificate lifecycle management including issuance, renewal, revocation, and automation via approved platforms.
  • Design, test, and implement automation workflows for privileged identity and certificate management systems.
  • Provide operational support through system configuration, troubleshooting, incident response, and participation in a 24x7 on-call rotation.
  • Produce reports and analytics regarding privileged access, secrets rotation posture, and certificate health.
  • Maintain technical documentation, policy standards, and operational runbooks to ensure secure platform management.

What we're looking for

  • Must possess eligibility to work in the United States for any employer at the date of hire.
  • Bachelor’s degree or equivalent experience.
  • 3–5 years of experience in IAM, Security Engineering, or Infrastructure Security.
  • Hands-on experience with PAM platforms, secrets management tools, AWS IAM, or enterprise PKI/certificate management.
  • Experience administering Active Directory service accounts.
  • Working knowledge of RBAC, JIT access concepts, and service/workload identity security.
  • Scripting experience in PowerShell, Python, or Bash.
  • Relevant technical certifications such as AWS Security Specialty or HashiCorp Vault Associate (preferred).

More like this

Similar roles

Associate Principal Security Engineering

The OCC

Chicago, IL 103 days ago
CyberArk HashiCorp Vault Active Directory PKI Python GoLang Bash PowerShell Terraform Ansible Jenkins CI/CD AWS IAM OAuth 2.0 OIDC Security as Code
Hybrid

Zero Trust Information Systems Security Engineer

Booz Allen Hamilton

Honolulu, HI 27 days ago $99,000$225,000
Zero Trust ICAM PAM Delinea SailPoint Radiant Logic Ping Federate Active Directory SAML OAuth 2.0 OpenID Connect NIST 800-207 Splunk Elastic Logstash Kibana Cribl Confluent PowerShell Ansible Terraform Python Puppet Chef IDS IPS Firewalls
3+ yrs exp

Systems Engineer II

Abbott

San Diego, CA 38 days ago $81,500$141,300
Systems Engineering Risk Analysis System Design Process Improvement Quality Standards Testing
3+ yrs exp

Systems Engineer II

Lam Research

Fremont, CA 14 days ago $86,000$183,000
PCB Design Firmware C++ Python Java Verilog VHDL Electrical Schematics Embedded Systems Troubleshooting Oscilloscopes Soldering Power Supplies System Integration
2+ yrs exp Hybrid

Aircraft Systems Engineer II

General Dynamics

Savannah, GA 55 days ago
Systems Engineering Requirements Management Validation Verification Change Management Process Assurance Functional Integration MBSE IBM DOORS Siemens Teamcenter MATLAB System Composer Cameo
1+ yrs exp