> Markdown version of [/jobs/ext/132362-senior-iam-engineer-privileged-access-management](https://www.wearedevelopers.com/jobs/ext/132362-senior-iam-engineer-privileged-access-management). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior IAM Engineer - Privileged Access Management

- **Company:** CVS Health
- **Location:** United States
- **Experience:** Expert
- **Salary:** $92,700.0 - $185,400.0
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Active Directory, Amazon Web Services, Authentication Protocols, Microsoft Azure, Unix, Cloud Computing, Linux, Identity and Access Management, Microsoft SQL Server, Neo4j, Oracle (Applications), Ping (Networking Utility), Google Cloud, Cyberark, SailPoint, Api Management
- **Published:** May 19, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=bbf7c2d8276b8b33

## About the Role

* 5+ years of experience in Identity and Access Management (IAM) with a focus on Privileged Access Management.
 * 3+ years of hands-on experience with BeyondTrust or similar PAM platforms (e.g., CyberArk, Thycotic).
 * 3+ years of experience with Active Directory, LDAP, and enterprise authentication protocols.
 * 3+ years of experience onboarding privileged accounts for infrastructure and applications (e.g., Oracle, Linux/Unix, MSSQL).

Preferred Qualifications

 * Proven ability to troubleshoot access issues and manage policy updates in a complex environment.
 * Familiarity with password rotation, vaulting, and service account onboarding processes.
 * Excellent communication and documentation skills.

 * Experience with API integrations for PAM automation and service account onboarding.
 * Familiarity with IAM modernization tools such as SailPoint, Ping, or Neo4j.
 * Prior involvement in enterprise-wide remediation or migration projects (BeyondTrust).
 * CISSP, CISM, or other relevant security certifications., * Bachelor's degree or equivalent experience (High School Diploma and 4 years relevant experience)

## Description

The Privileged Access Management (PAM) Security Engineer will play a critical role in safeguarding enterprise systems by designing, implementing, and maintaining secure access controls for privileged accounts. This role will focus on the deployment and operational support of PAM solutions-primarily BeyondTrust-across a diverse technology landscape including Active Directory, Windows, UNIX, MSSQL, Oracle, and cloud platforms (Azure, GCP, AWS). The engineer will collaborate with cross-functional teams to ensure compliance with enterprise security standards (e.g., ISTS, GRC), streamline credential management, and support automation of access provisioning and deprovisioning processes.


## Related Videos

- [Putting the Graph In GraphQL With The Neo4j GraphQL Library](https://www.wearedevelopers.com/videos/257-putting-the-graph-in-graphql-with-the-neo4j-graphql-library)
- [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker)
- [WeAreDevelopers LIVE - Node and Package Security](https://www.wearedevelopers.com/videos/2138-wearedevelopers-live-node-and-package-security)
- [Hacking MSSQL on Cloud. All of them. How I became sysadmin on Azure, AWS, GCP and Alibaba.](https://www.wearedevelopers.com/videos/100339-hacking-mssql-on-cloud-all-of-them-how-i-became-sysadmin-on-azure-aws-gcp-and-alibaba)
- [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data)
- [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker)

## Related Articles

- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [The top 200 passwords of 2024 can be cracked in less than a second](https://www.wearedevelopers.com/magazine/502-the-top-200-passwords-of-2024-can-be-cracked-in-less-than-a-second)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Everything a Developer Needs to Know About MCP with Neo4j](https://www.wearedevelopers.com/magazine/604-everything-a-developer-needs-to-know-about-mcp-with-neo4j)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)