PAM Engineer

The Privileged Access Management (PAM) Engineer is responsible for the planning, design, implementation, delivery, and ongoing support of enterprise PAM capabilities. This role focuses on protecting privileged accounts, credentials, secrets, and privileged sessions across on-premises, hybrid, and multi-cloud environments. The PAM Engineer will help mature the organization’s PAM program by ensuring solutions are secure, scalable, reliable, and aligned with information security requirements.
Key Responsibilities
• Design, implement, administer, and maintain enterprise Privileged Access Management solutions across on-premises, hybrid, and multi-cloud environments.
• Enforce least privilege access models and support secure privileged account lifecycle management.
• Automate credential rotation, password management, secrets management, and privileged access workflows.
• Configure and support privileged session management, monitoring, recording, and audit capabilities.
• Integrate PAM platforms with enterprise systems, including identity providers, directories, cloud platforms, infrastructure, applications, databases, and security tools.
• Develop technical specifications, implementation plans, operational procedures, and support documentation for PAM capabilities.
• Troubleshoot PAM-related issues, incidents, access failures, platform performance concerns, and integration challenges.
• Support compliance, audit, and risk management activities by maintaining accurate records, reporting, and evidence of privileged access controls.
• Partner with IAM, Information Security, Infrastructure, Cloud, Application, and Operations teams to identify privileged access risks and implement secure solutions.
• Assist in defining PAM standards, policies, processes, and roadmap activities under the direction of IAM leadership.
Required Qualifications
• Hands-on experience supporting Privileged Access Management, Identity and Access Management, information security, or related security engineering functions.
• Experience with enterprise PAM platforms such as CyberArk, BeyondTrust, Delinea, Bravura Security, HashiCorp Vault, or similar technologies.
• Strong understanding of privileged account management, service account governance, secrets management, password vaulting, credential rotation, and access control principles.
• Experience integrating PAM solutions with directories, authentication services, servers, databases, applications, APIs, and cloud platforms.
• Working knowledge of Windows, Linux/Unix, databases, networking concepts, and common enterprise infrastructure patterns.
• Ability to develop clear technical documentation, operational runbooks, process flows, and stakeholder communications.
• Strong analytical, troubleshooting, collaboration, and communication skills.
Preferred Qualifications
• Experience with PAM modernization, platform upgrades, disaster recovery planning, and operational resiliency improvements.
• Familiarity with cloud security and secrets management across Microsoft Azure, AWS, Google Cloud, or similar cloud environments.
• Experience with automation, scripting, APIs, CI/CD pipelines, or infrastructure-as-code practices.
• Knowledge of security frameworks, audit requirements, regulatory expectations, and compliance-driven access controls.
• Relevant certifications such as CISSP, Security+, CyberArk, BeyondTrust, Delinea, Microsoft Azure, AWS, or other security and cloud certifications.
Success in This Role
A successful PAM Engineer will strengthen the organization’s privileged access security posture by delivering reliable PAM services, reducing credential-related risk, improving automation, supporting audit readiness, and enabling secure access to critical systems. The engineer will be expected to balance technical execution with clear communication, strong documentation, and effective collaboration across technology and security teams.

Skills and Requirements – add details here