Full-Time Sr. Privileged Access Management (PAM) Engineer

• Identifying unmanaged or hidden privileged accounts.
• Automating issuance, rotation, expiration, and revocation.
• Delivering reports and audit trails aligned with regulatory requirements.
• Deploy, configure, and maintain PAM platforms (e.g., CyberArk, Remediant (now Netwrix), HashiCorp Vault).
• Ensure high availability, redundancy, and secure configuration of PAM solutions.
• Develop and manage ephemeral access models.
• Implement workflows for secure credential storage, rotation, and retrieval.
• Enforce password complexity, rotation policies, and automatic credential management.
• Define and enforce role-based access controls (RBAC) and least privilege access.
• Discover, onboard, and manage machine, service, and application accounts.
• Support secrets management integration in CI/CD pipelines.
• Ensure access policies align with regulatory frameworks (e.g., SOX, NIST, PCI-DSS).
• Work with infrastructure, DevOps, and application teams to embed PAM in standard workflows.

• 5 years experience in identity and access management (IAM), security engineering, or infrastructure roles.
• Hands-on experience implementing and managing PAM tools (e.g., CyberArk, BeyondTrust, HashiCorp Vault, Azure PIM).
• Experience onboarding service accounts, application credentials, and secrets management.
• Strong understanding of integration with Active Directory, LDAP, Azure AD, and identity providers (e.g., Okta, Entra).
• Familiarity with identity federation and access management concepts (SAML, OAuth, OIDC).
• Experience integrating PAM logs and session data into SIEM platforms (e.g., Splunk, Sentinel).
• Understanding of audit trail requirements for privileged activity.
• Bachelor’s Degree in an IT related field and/or equivalent work experience.

What is the last date for applying to the job?

Which countries are accepted for this remote job?