- Company Name
- CC Pace
- Job Title
- PAM Engineer
- Job Description
-
Job title: PAM Engineer
Role Summary:
Responsible for the operation, configuration, and enhancement of Privileged Access Management (PAM) solutions across AIX, RHEL, Windows, and Mainframe environments. Leads security feature development, integration projects, and automation initiatives to protect and streamline privileged access. Provides on‑call support, monitoring, reporting, and documentation for production PAM infrastructure.
Expactations:
Deliver secure and scalable PAM solutions that meet enterprise security standards and regulatory requirements. Drive continuous improvement through automation, capacity planning, and process optimization. Collaborate cross‑functionally with IT, security, and business stakeholders to align PAM strategy with organizational objectives.
Key Responsibilities:
- Operate and maintain PAM platforms (CyberArk, BeyondTrust, Delinea) and related components (PSM, CPM, credential providers).
- Design, configure, and support PAM for AIX, RHEL, Windows, and Mainframe systems, ensuring integration with ServiceNow, IGA, SIEM, Azure AD, PKI, and database platforms.
- Lead projects to deliver new security features, patches, and upgrades using SAFe, Scrum, or Kanban frameworks.
- Automate PAM processes with PowerShell, Bash, and Ansible; develop scripts and connectors for external services.
- Perform discovery, gap analysis, and onboarding of new systems and services; contribute to the PAM security strategy and long‑term roadmap.
- Monitor system performance, capacity, and usage; prepare regular reports for leadership on security posture and licensing.
- Provide 24/7 rotational on‑call support for production PAM environments.
- Author and maintain documentation, inventory, and diagrams of PAM processes and infrastructure.
- Consult on internal projects to enforce data transmission, identity security, and best practices.
Required Skills:
- 5‑7+ years of administering PAM solutions (CyberArk, BeyondTrust, Delinea).
- Expertise with identity and access management technologies: Active Directory, Azure AD, PKI, Federation Services, RSA.
- Experience integrating PAM with Windows, Linux/Unix, VMWare, Azure, SQL/Oracle/DB2, network appliances, and mainframe systems.
- Strong scripting and automation skills in PowerShell, Bash, and Ansible.
- Familiarity with change control (Production Discipline), capacity planning, and performance monitoring.
- Excellent verbal and written communication; ability to present findings clearly.
- Proven ability to work with stakeholders at all levels and manage vendor relationships.
Required Education & Certifications:
- Bachelor’s degree in Information Technology, Computer Science, or related field.
- Industry certifications in cybersecurity or identity security (e.g., CISSP, CISM, CompTIA Security+, CyberArk Defender, Sentry, Guardian).
- Advanced certifications or experience with CyberArk PSM/CPM connectors and credential providers (AAM, CCP).
---