Senior PAM / PKI Analyst

Career Area:

Technology, Digital and Data

Job Description:

Your Work Shapes the World at Caterpillar Inc.

When you join Caterpillar, you're joining a global team who cares not just about the work we do – but also about each other.  We are the makers, problem solvers, and future world builders who are creating stronger, more sustainable communities. We don't just talk about progress and innovation here – we make it happen, with our customers, where we work and live. Together, we are building a better world, so we can all enjoy living in it.

Senior PAM / PKI Analyst

Role Definition:
 

We are seeking technically proficient and security-focused PAM & PKI resource to lead the implementation, management, and evolution of our Privileged Access Management (PAM) and Public Key Infrastructure (PKI) capabilities. This role is a unique blend of technical expertise, operational excellence, and collaborative leadership in critical security domains.
 

As the Lead of PAM & PKI, you will design, deploy, and support enterprise certificate management and privileged access solutions that protect our most critical systems and data. You'll work closely with architecture, engineering, and application teams to ensure the availability, security, and compliance of PAM and PKI platforms across Windows, Linux and Cloud Environments.
 

You must deeply understand encryption concepts, certificate lifecycle management, HSM operations, PAM platforms, and DevOps & Agile principles to succeed in this role. So, if you are ready to take on this exciting challenge and significantly impact the cybersecurity landscape, apply now, and join our dynamic team!

What You Will Do: 

• Lead the deployment, configuration, and ongoing management of enterprise PKI solutions such as Venafi Trust Protection Platform (TPP), KeyFactor EJBCA, and integration with certificate authorities (DigiCert, Entrust)

• Manage and support enterprise Privileged Access Management (PAM) platforms

• Oversee certificate lifecycle management across Windows and Linux operating systems, ensuring compliance and eliminating certificate-related outages

• Provide expert-level support to end users and application teams across the enterprise for PAM and PKI services

• Manage and maintain Windows and Linux servers that host critical security infrastructure

• Develop PowerShell scripts and leverage other programming languages to automate certificate provisioning, rotation, and PAM workflows

• Conduct root cause analysis on security incidents and implement corrective actions

• Participate in Disaster Recovery planning and testing to ensure business continuity for critical security services

• Stay current with emerging trends in PKI and PAM technologies and recommend improvements to enhance security posture

What You Have:

• Excellent problem-solving abilities coupled with solid communication and documentation skills.

• Strong understanding of encryption concepts, techniques, and cryptographic best practices.

• Extensive knowledge and experience with IAM solutions such as Active Directory, Entra ID, CyberArk, Ping, and Multifactor Authentication.

• Knowledge and experience with modern application development practices.

• Experience managing Hardware Security Modules (HSMs) for secure key storage.

• Robust technical architecture and operational technology experience, preferably with experience in Cloud technologies.

• Demonstrated experience with ITSM practices, including incident, problems, and change management.

• Proven success working in Agile/Scrum environments and collaborating with development, operations, and security teams

Skills Descriptors:

Communicating Complex Concepts:

• Knowledge of effective presentation tools and techniques to ensure clear understanding; ability to use summarization and simplification techniques to explain complex technical concepts in simple, plain language appropriate to the audience.

Consulting:

• Knowledge of techniques, roles, and responsibilities in providing technical or business guidance to clients, both internal and external; ability to apply consulting knowledge appropriately.

Cybersecurity Standards and Policies:

• Knowledge of developing cybersecurity policies, standards, and procedures; ability to develop and communicate policies, standards and procedures that guide interactions with customers.

Adaptability:

• Willingness to adapt to new challenges an