Associate Principal, Security Engineering
Office of the Comptroller of the Currency3 months ago
Responsibilities
- Provide 24x7 operational support for privileged management solutions, including hot fixes, bug resolution, troubleshooting, break-fixes, secrets lifecycle management, and end-user support.
- Maintain privileged access management infrastructure through patching, version control, upgrades, and alignment with OCC and security standards.
- Serve as the subject matter expert for secrets management and privileged access management architecture.
- Establish and enforce security-as-code principles across the environment.
- Develop system enhancements, improve platform user experience, and implement automated integrations.
- Design long-term solutions for operational issues, including AI-based capabilities for faster detection and remediation.
- Collaborate with cross-functional teams to address complex security challenges.
Requirements
- Experience in security operations, development, engineering, or architecture.
- Experience supporting privileged access management and access controls programs.
- Expertise with one or more of CyberArk, HashiCorp Vault, Active Directory Certificate Services, hardware security modules, or public key infrastructure.
- Expertise in one or more of Go, Bash, Python, PowerShell, Ansible, or Terraform.
- Knowledge of application authentication and authorization systems, including Active Directory, OAuth 2.0, OIDC, AWS IAM, AppRole, Kubernetes, LDAPS, Kerberos, and certificates.
- Working knowledge of cloud ecosystems and CI/CD deployments using Terraform, Ansible, and Jenkins pipelines.
- Working knowledge of security architecture principles covering confidentiality, integrity, and availability.
- Professional or personal experience using AI coding agents such as OpenAI Codex, Claude Code, or Gemini CLI.
- No supervisory experience is required; the position has no supervisory responsibilities.
Benefits
- Hybrid work environment with up to two remote-work days per week.
- Tuition reimbursement and student loan repayment assistance.
- Technology stipend for choosing a device used to connect to the network while working remotely.
- Generous paid time off and parental leave.
- 401(k) employer match.
- Medical, dental, and vision benefits.
- Potential eligibility for a discretionary annual incentive compensation award.