This position requires office presence of a minimum of 5 days per week and is only located in the location(s) posted. No relocation is offered.
About the Company:
Join AT&T and reimagine the communications and technologies that connect the world. Our Chief Security Office ensures that our assets are safeguarded through truthful transparency, enforce accountability and master cybersecurity to stay ahead of threats. Bring your bold ideas and fearless risk-taking to redefine connectivity and transform how the world shares stories and experiences that matter. When you step into a career with AT&T, you won't just imagine the future-you'll create it.
About the Job:
We are seeking a highly skilled Principal Cybersecurity Engineer to join our Privileged Access Management (PAM) team. This role will lead the technical strategy, product implementation, and onboarding of privileged accounts, applications, and services. The ideal candidate will have deep expertise in PAM solutions (CyberArk and/or Delinea), and automation to enhance our security posture.
You will collaborate with cross-functional teams, ensuring seamless integration of PAM solutions across on-premises environment. If you are passionate about zero-trust architecture, Just-in-Time (JIT) access, and automation, come join us!
Key Roles & Responsibilities:
PAM Strategy & Leadership
Drive the technical roadmap and onboarding framework for privileged access security.
Act as the subject matter expert (SME) for PAM solutions and security best practices.
Partner with IT, Security, DevOps, and Cloud teams to enforce least privilege access.
PAM Implementation & Automation
Deploy and manage PAM solutions, ensuring high availability and scalability.
Automate privileged account provisioning, vaulting, rotation, AD Bridging and deprovisioning.
Integrate PAM with Active Directory, IAM, SIEM, and ITSM tools (e.g., ServiceNow).
Implement Just-in-Time (JIT) access and enforce Zero Standing Privileges (ZSP).
Security Governance & Compliance
Define PAM security policies, ensuring compliance with SOC 2, HIPAA, PCI DSS, and NIST standards.
Conduct risk assessments and access reviews to maintain strong security controls.
Support internal and external audits by providing PAM governance artifacts.
Incident Response & Monitoring
Monitor privileged sessions for suspicious activity and unauthorized access.
Develop runbooks and playbooks for privileged access security incidents.
Collaborate with the SOC team for continuous monitoring and anomaly detection.
Training & Awareness
Provide training and best practices on PAM onboarding for internal teams.
Promote security awareness around privileged access risks and hygiene.
Job Contribution:
Enhance security posture, reducing risk, and ensuring compliance.
Education:
Preferred bachelor's degree in information systems, or Cyber Security or equivalent experience.
Supervisory:
No
Qualifications & Skills:
Required:
8+ years of experience in Cybersecurity, IAM, or PAM roles.
Expertise in PAM solutions (CyberArk, Delinea).
Experience with privileged account onboarding and identity lifecycle automation.
Strong knowledge of Active Directory (AD), Azure AD, LDAP, and cloud IAM.
Hands-on experience integrating PAM with IAM, SIEM, ITSM, and DevOps tools.
Knowledge of compliance frameworks (SOC 2, HIPAA, PCI DSS, NIST, ISO 27001).
Scripting and automation skills (Python, PowerShell, APIs).
Ability to lead projects, mentor teams, and drive PAM adoption.
Preferred:
CyberArk Defender, Sentry, or CISSP certifications.
Experience with cloud security (Azure) and containerized environments.
Familiarity with CI/CD pipelines and DevSecOps security practices.
Our Principal Cybersecurity, earns between $158,200.00-$237,400.00 USD Annual not to mention all the other amazing rewards that working at AT&T offers. Individual starting salary within this range may depend on geography, experience, expertise, and education/training.
Joining our team comes with amazing perks and benefits:
Medical/Dental/Vision coverage
401(k) plan
Tuition reimbursement program
Paid Time Off and Holidays (based on date of hire, at least 23 days of vacation each year and 9 company-designated holidays)
Paid Parental Leave
Paid Caregiver Leave
Additional sick leave beyond what state and local law require may be available but is unprotected.
Employee discounts up to 50% off on eligible AT&T mobility plans and accessories, AT&T internet (and fiber where available) and AT&T phone.
#LI-Onsite - Full-time office role-
AT&T is leading the way to the future - for customers, businesses, and the industry. We're developing new technologies to make it easier for our customers to stay connected to their world. Together, we've built a premier integrated communications and entertainment company and an amazing place to work and grow. Team up with industry innovators every time you walk into work, creating the world you always imagined. Ready to #transformdigital with us?
Apply now!
Weekly Hours: 40
Time Type: Regular
Location: USA:TX:Dallas / One AT&T Plaza (208 S Akard - Whitacre Tower) - Adm:208 S Akard St
Salary Range: $141,300.00 - $237,400.00
It is the policy of AT&T to provide equal employment opportunity (EEO) to all persons regardless of age, color, national origin, citizenship status, physical or mental disability, race, religion, creed, gender, sex, sexual orientation, gender identity and/or expression, genetic information, marital status, status with regard to public assistance, veteran status, or any other characteristic protected by federal, state or local law. In addition, AT&T will provide reasonable accommodations for qualified individuals with disabilities.