Senior PAM Engineer

About the Role 

The Senior PAM Engineer will play a key role in securing Mattels most sensitive accounts and systems by implementing managing and supporting privileged access solutions. This role will focus on designing operating and troubleshooting PAM platforms and integrations ensuring privileged identities are properly managed monitored and protected across on-premises cloud and hybrid environments. 

As a senior engineer this position serves as an escalation point for complex PAM issues privileged account lifecycle management secrets management and access control enforcement. The Sr. PAM Engineer will work closely with IAM Architects IAM Engineers and ITDR Analysts to strengthen privileged account security ensure compliance with regulatory requirements and contribute to operational resilience through automation monitoring and risk remediation. 

 
Objectives of this Role 

• Implement support and enhance PAM solutions including CyberArk Okta OPA BeyondTrust Delinea Admin By Request and Cerby for privileged account and secrets management. 

• Administer and monitor Windows/Linux server privilege management and endpoint privilege management (Windows/macOS). 

• Provide escalation support for complex PAM integrations API connections and secrets management issues. 

• Ensure privileged accounts follow lifecycle management rotation and access control best practices. 

• Support incident management disaster recovery planning and risk remediation specific to privileged accounts. 

• Collaborate with IAM Engineers and ITDR Analysts on threat detection incident response and privileged access misuse investigations. 

• Maintain compliance with SOX PCI and audit requirements including User Access Reviews (UARs) and reporting. 

• Develop and maintain runbooks playbooks workflows and technical documentation for PAM operations. 

• Develop and maintain monitoring dashboards with tools such as Grafana Splunk and Sumo Logic for PAM metrics and alerts. 

• Drive automation of privileged access tasks (e.g. PowerShell VBScript Python REST APIs Ansible or Terraform). 

• Mentor other engineers and promote PAM best practices across the enterprise. 

• Additional duties may be assigned as necessary to meet the ongoing needs of the organization. 

• Work hours may vary and the position may require availability during off-business hours as dictated by project needs system changes or security events. 

Qualifications :

Skills and Qualifications 
 
Required: 

• 5 years of strong hands-on experience in Privileged Access Management or identity security tools (e.g. CyberArk Okta OPA BeyondTrust Delinea and Cerby for PAM and secrets management). 

• Hands-on expertise in secure password rotation credential vaulting and secrets management for privileged accounts across Windows/Linux servers and Windows/macOS endpoints. 

• Proven experience designing and enforcing least privilege access Just-in-Time (JIT) provisioning and role-based access control (RBAC) models within enterprise PAM solutions. 

• Hands-on experience with Active Directory/LDAP Entra ID (Azure AD) and cloud PAM integrations (e.g. AWS GCP and Azure). 

• Experience supporting incident response disaster recovery and risk remediation in PAM environments. 

• Knowledge of compliance requirements (SOX PCI) and experience supporting User Access Reviews (UARs) and audit reporting. 

• Proficiency with monitoring and analytics platforms (e.g. Grafana Sumo Logic CrowdStrike ITP etc.). 

• Excellent communication and collaboration skills with the ability to support cross-functional security initiatives. 

• Experience developing operational dashboards metrics and compliance reporting. 

• Advanced Microsoft Excel including pivot tables formulas and data analysis. 

• Certification in CyberArk or comparable PAM technologies with demonstrated ability to design implement and maintain secure privileged access environments. 

• Participate in after-hours rotations or on-call duties to support critical incident response as needed. 

Preferred: 

• Bachelors degree in technology or applicable experience. 

• CISSP CISMP certification or other security certifications. 

• Familiarity with endpoint detection and response (EDR) integrations for PAM (e.g. CrowdStrike ITP). 

• Background in scripting and automation with PowerShell Python and REST APIs. 

• Strong troubleshooting skills across Windows/Linux platforms middleware load balancers SSL certs and cloud components. 

• Familiarity with authentication and federation protocols (SAML OAuth OIDC SCIM). 

• Experience with automation and infrastructure tools (Ansible Terraform CI/CD pipelines). 

Additional Information :

Dont meet every single requirement At Mattel we are dedicated to an inclusive workplace and a culture of belonging. If youre excited about this role but your past experience doesnt align perfectly with every qualification in the job description we still encourage you to apply. You may be just the right candidate for this or other roles.

How We Work:
We are a purpose driven company aiming to empower generations to explore the wonder of childhood and reach their full potential. We live up to our purpose employing the following behaviors:

• We collaborate: Being a part of Mattel means being part of one team with shared values and common goals. Every person counts and working closely together always brings better results. Partnership is our process and our collective capabilities is our superpower.
• We innovate: At Mattel we always aim to find new and better ways to create innovative products and experiences. No matter where you work in the organization you can always make a difference and have real impact. We welcome new ideas and value new initiatives that challenge conventional thinking.
• We execute: We are a performance-driven company. We strive for excellence and are focused on pursuing best-in-class outcomes. We believe in accountability and ownership and know that our people are at their best when they are empowered to create and deliver results.

Our Approach to Flexible Work:
We embrace a flexible work model designed to empower a culture of growth optimism and wellbeing where every employee can reach their full potential. Combining purposeful in-person collaboration with flexibility our focus is to optimize performance and drive connection for moments that matter.

Who We Are:
Mattel is a leading global toy and family entertainment company and owner of one of the most iconic brand portfolios in the world. We engage consumers and fans through our franchise brands including Barbie Hot Wheels Fisher-Price American Girl Thomas & Friends UNO Masters of the Universe Matchbox Monster High MEGA and Polly Pocket as well as other popular properties that we own or license in partnership with global entertainment companies. Our offerings include toys content consumer products digital and live experiences. Our products are sold in collaboration with the worlds leading retail and ecommerce companies. Since its founding in 1945 Mattel is proud to be a trusted partner in empowering generations to explore the wonder of childhood and reach their full potential.

Mattels award-winning workplace culture has been recognized by Forbes Fast Company Newsweek Great Place to Work TIME and more.

Visit us at  is an Equal Opportunity Employer where we want you to bring your authentic self to work every day. We welcome all job seekers and all applicants will receive consideration for employment.

Videos to watch:
The Culture at Mattel
Corporate Philanthropy

Remote Work :

No

Employment Type :

Full-time