Sr. PAM Engineer

Insight Global
New York, NY, United States
27 days ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Experience required
5 years minimum
Working hours
Regular working hours
Job source

Tech stack

Application Programming Interfaces (APIs) Cyber Security Identity and Access Management Python (Programming Language) Password Management Windows PowerShell Role-Based Access Control Zero Trust Network Access Scripting Enterprise Software Applications Cyberark Hashicorp
+3 more
Api Design SailPoint Servicenow

Job description

As a Senior Engineer, Privileged Access Management, you will help lead the design, implementation, and operational maturity of PAM solutions across the Enterprise. This role serves as a subject matter expert responsible for securing privileged access to critical systems, driving integrations, improving automation, and partnering with business groups, technology teams, and external partners to represent PAM services professionally., * Lead the administration, enhancement, and operational support of PAM technologies, including account onboarding, password management, secrets handling, policy enforcement, and platform health.

  • Own system patching, monitoring, maintenance, and lifecycle management activities for PAM infrastructure, ensuring reliability, scalability, and alignment with enterprise security standards.

  • Drive the implementation, documentation, and continuous improvement of PAM integrations with enterprise systems, applications, directories, cloud platforms, and identity tools.

  • Develop and improve automation using scripting, APIs, and available tools to reduce manual effort, improve operational consistency, and support scalable PAM processes.

  • Serve as an escalation point for complex PAM issues, leading troubleshooting, root cause analysis, remediation planning, and coordination across engineering, architecture, and operations teams.

  • Lead integration efforts with technologies such as ServiceNow, SailPoint, CyberArk, Netwrix, HashiCorp Vault, BeyondTrust, and other identity or API-based systems.

  • Maintain and mature technical documentation, operational procedures, service inventories, architecture diagrams, and integration runbooks related to PAM services.

  • Proactively monitor system alerts, performance indicators, audit findings, and operational trends to identify risk, recommend improvements, and drive timely remediation.

  • Lead demo meetings, service reviews, and technical discussions with internal business groups and external partners, representing PAM services professionally and explaining capabilities, processes, risks, and value in a clear and confident manner.

  • Mentor engineers, contribute to team standards, and help shape PAM strategy, roadmap execution, and cybersecurity best practices across the organization.

Requirements

  • 5+ years of hands-on experience with PAM solutions such as CyberArk, Netwrix, Just-in-Time-Admin Access, HashiCorp Vault, or BeyondTrust in an enterprise environment.

  • 5+ years of experience using scripting languages and automation frameworks, including but not limited to PowerShell and Python.

  • 7+ years of IT and/or Cybersecurity experience, preferably within IAM, PAM, identity security, and infrastructure security

  • Strong working knowledge of Windows, Linux/Unix operating systems and commands

  • Strong understanding of cybersecurity principles, including least privilege, Just-In-Time-Admin access, Zero Trust, credential protection, privileged account governance, and operational risk reduction.

  • Must possess exceptional written, verbal, and interpersonal communication skills, with the ability to influence stakeholders, lead technical discussions, present to business groups and partners, and clearly communicate PAM service value, risks, and recommendations.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.juju.com

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

1:04 min

Introduction to Bitcoin script parsing tools

Steve Shadders · LIVE

5:24 min

Demonstrating database encryption at rest with HashiCorp Vault

Alex Soto Alex Soto · LIVE

4:01 min

Finding personal fulfillment in the cybersecurity industry

LIVE

1:53 min

Evaluating traditional scripting languages for modern development tasks

Jens Knipper Jens Knipper · Europe 2026 Virtual

5:01 min

Bridging the gap between software development and security

Vandana Verma · LIVE

2:39 min

Generating dynamic application secrets using HashiCorp Vault engines

Alex Soto Alex Soto · LIVE

Videos

See all

Related articles

See all