Apply on Employer Site

The Options Clearing Corporation (OCC) · 2 days ago

Associate Principal, Security Engineering

Chicago, IL

Full-time

Hybrid

Senior Level, Lead/Staff

$121K/yr - $198K/yr

The Options Clearing Corporation (OCC) is the world's largest equity derivatives clearing organization. In this role, you'll manage privileged access systems, implement AI-based security capabilities, and help shape the security architecture to strengthen the organization's cybersecurity posture.

FinanceFinancial ServicesProperty Management

No H1B

Responsibilities

Provide 24x7 operational support for the suite of privileged management solutions (e.g., CyberArk, Hashi, PKI), including implementing hot fixes, resolving bugs, troubleshooting issues, performing break-fixes, managing secrets lifecycle, and delivering end-user support

Maintain robust operational integrity of privileged access management infrastructure throughout its lifecycle (e.g., patching, version control, system upgrades, alignment with OCC/Security standards, etc.). Provide organizational subject matter expert on secrets management and privileged access management architecture, establishing and enforcing security as code principles throughout the environment

Develop and implement system enhancements to improve platform user experience and automated integrations, while designing long-term solutions to address operational issues through innovative technologies including artificial intelligence for faster detection and remediation of functional and technical problems

Qualification

Privileged access managementCyberArkSecurity architecture designCloud ecosystem knowledgeScripting languagesAI coding agentsCollaboration skillsProblem-solving skills

Required

Knowledge of application authentication and authorization systems (i.e., Active Directory, oAuth 2.0, OIDC, AWS IAM, App Role, k8s, LDAPS, Kerberos, Certificate)

Working knowledge of the cloud ecosystem and CI/CD deployments with Terraform, Ansible, and Jenkins pipelines

Working knowledge of security architecture design and principles including confidentiality, integrity and availability

Expertise in providing operational and engineering support for one or more of the following: CyberArk, HashiCorp Vault, Active Directory Certificate Services (ADCS), HSMs, and Public Key Infrastructure (PKI)

Expertise in scripting languages and developing in one or more of the following languages GoLang, Bash, Python, PowerShell, Ansible, and/or Terraform

Knowledge of privileged access management methodologies and techniques for on-prem and Cloud implementation

Experience in one or more of the following disciplines: security operations, development, engineering, or architecture

Experience supporting privileged access management and access controls programs

Professional or personal experience using AI coding agents such as OpenAI Codex, Claude Code, or Gemini CLI