Staff - Privileged Access Vault & Certificate Engineer

Charles Schwab   •  

Phoenix, AZ

Industry: Financial Services


5 - 7 years

Posted 386 days ago

This job is no longer available.



We believe that, when done right, investing liberates people to create their own destiny. We are driven by our purpose to champion every client’s goals with passion and integrity. We respect and appreciate the diversity of our employees, our clients, and the communities we serve. We challenge conventions strategically to create value for our clients, our firm and the world. We live and bring to life the concept of ‘own your tomorrow’ every day. We champion our employee strengths, guide their development, and invest in their long-term success. We hire optimistic, results-oriented, curious, innovative, and adaptable people with the desire to help our clients and one another succeed.

As a company, we were established by Chuck over 40years ago to champion Main Street over Wall Street, and to help Americans transform themselves from earners to owners. Through advocacy and innovation, we work to make investing more affordable, accessible and understandable for all. As we enter our fifth decade, we are looking for talented, innovative and driven people who believe they can help themselves, and our clients, create a better future.

Our Opportunity:

Provides engineering expertise, tier-2 escalation support, and maturing of service processes for the implementation & integration of Schwab CybersecuritySecurityEngineering products and services. Assists with the integration of technologies into existing services to reduce risk and align business requirements with security standards. Delivers guidelines and best practices for managedsecurity services based on security standards/policies. Provides customers with subject matter expertise, consultation and escalation support.  Maintains and supports securitytechnologyinfrastructures.  Manages vendor relationship, maintains roadmaps and supports vendor escalations. 

What you’ll do:

  • PAM Services & endpoint tier-2 implementation, business integration, configuration management, Policy implementation & enforcement, and client support

  • QAS Authentication Services tier-2 implementation, business integration, configuration management and client support

  • Certificate Services tier-2 implementation, business integration, configuration management and client support

  • Scripting/batch/automation

  • Ensuring availability of enterprise-level and customer facing services

  • Provide consultation and SME guidance to business partners and support teams

  • Provide continuous service delivery and product lifecycle integration

  • Partner with project teams & colleagues and coordinate implementation, aligning to the company’s vision & purpose

  • Develop and nurture vendor relationships during all project phases including implementation, integration, and ongoing support

What you have:

Duties require an experienced security engineer, who understands product lifecycle, certification and delivery.  Responsibilities include service and product implementation, integration & ensuring availability across SCS SecurityEngineering Services.  Duties include coordinating service integration and product implementation, process maturation, and managing vendor relationships.  Additionally, responsibilities include customer consultation, tier-2 support, as well as providing guidance and direction to consumers and support teams.

  • Customer service oriented

  • Able to work well in a team environment

  • Minimum of 6 - 10years of IT security administration, infrastructureengineering and operational support within an enterprise environment with at least 5,000+ users

  • Working experience with Authentication, Certificate & PAM technologies

  • Must have a solid understanding and experience implementing industry standard security concepts and operational tools.

  • Must demonstrate ability to perform and respond well in crisis situations

  • Effective oral and written communication skills

  • Ability to work independently and effectively cooperate with others

Preference will be given to candidates with the following background:

  • Engineeringexperience with PKI & SSL Certificate Management technologies

  • Engineeringexperience with Privileged Access Vaulting technologies

  • Scriptingexperience for automation and administration using standard technologies such as Batch, Pearl, PowerShell, VBS, VB, .NET

  • Working knowledge of operating systems such as Microsoft Windows, Unix (Linux/AIX/Solaris), and Mainframe

  • Working knowledge of relational database management systems such as Oracle, and MS SQL Server

What you’ll get:

  • Comprehensive Compensation and Benefits package
  • Financial Health: 401k Match, Employee Stock Purchase Plan, Employee Discounts, Personalized advice, Brokerage discounts
  • Work/Life Balance: Sabbatical, Paid Parental Leave, New Mothers returning to work Program, Tuition Reimbursement Programs, Time off to volunteer, Employee Matching Gifts Program
  • Everyday Wellness: Health and Lifestyle Wellness Rewards, Onsite Fitness Classes, Healthy Food Choices, Wellness Champions
  • Inclusion: Employee Resource Groups, Commitment to diversity, Strategic partnerships
  • Not just a job, but a career, with an opportunity to do the best work of your life