PAM Security Engineer

Job title: PAM Security Engineer

About the Role The role focuses on designing, implementing, and maintaining enterprise-wide Privileged Access Management (PAM) solutions to securely manage privileged credentials and access. You will provide L3 technical support for PAM incidents, enforce policies and standards, manage the full lifecycle of privileged accounts, and integrate PAM with existing infrastructure to support security and compliance objectives.

What You'll Do

• Design, implement, and maintain enterprise-wide PAM solutions to securely manage privileged credentials and access.
• Provide L3 technical support for complex PAM-related incidents and problems.
• Develop and enforce PAM policies, procedures, and standards aligned with industry best practices and compliance requirements.
• Manage the full lifecycle of privileged accounts, including provisioning, certification, and deprovisioning.
• Implement and optimize PAM tools for session recording, credential vaulting, and automated password rotation.
• Leverage and integrate MFA solutions and integrate MFA with ADFS for token management; utilize BeyondTrust password vault where needed.
• Conduct regular security assessments and audits of privileged access controls; perform root cause analysis for related incidents.
• Create and maintain documentation for PAM architecture, configurations, and operational procedures.
• Collaborate with cross-functional teams to integrate PAM solutions with existing infrastructure and security tools.
• Provide mentorship to junior team members on PAM best practices and troubleshooting techniques.
• Support security management in the domain and drive for compliance activities.

What We're Looking For

• Provide support for CyberArk PAM and BeyondTrust Privileged Identity by resolving on-call escalations and performing root cause analysis.
• Manage and maintain Privileged Access Solutions using Dellone TPAM and NetIQ PAM, ensuring compliance with quality standards and regulatory requirements.
• Update and manage the knowledge base, contributing to continuous improvement through documentation of solutions and best practices.
• Train and mentor new team members and analysts on PAM tools and processes.
• Independently resolve support tickets within SLAs, ensuring timely responses and effective solutions.
• Strive for first-call resolution and minimize case reopenings by applying strong analytical skills and technical expertise in PAM tools and REST APIs.

Nice to Have

• Certifications such as CISSP, CISM, and BeyondTrust certifications.
• Experience with DevSecOps practices and tools.
• Familiarity with cloud security and PAM solutions for cloud environments.
• Experience with implementing Just-In-Time (JIT) and Zero Trust access models.
• Knowledge of threat detection and incident response processes.
• Experience with automation and orchestration tools for security operations.
• PAM platforms knowledge: CyberArk, BeyondTrust, HashiCorp Vault, Thycotic Secret Server.
• Operating systems: Windows Server, Linux.
• Directory services: Active Directory, LDAP.
• Authentication: SAML, OAuth, MFA, PKI.
• Networking: TCP/IP, firewalls, routing, VPN technologies.
• Scripting: PowerShell, Python, Bash.
• SIEM: Splunk, QRadar, ArcSight.
• Infrastructure as Code: Terraform, Ansible.

Compensation & Benefits

• Salary not disclosed. Benefits not specified.