> Markdown version of [/jobs/ext/2625210-pim-pam-engineer](https://www.wearedevelopers.com/jobs/ext/2625210-pim-pam-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # PIM/ PAM ENGINEER - **Company:** Capgemini - **Location:** San Antonio, TX, United States - **Experience:** Experienced - **Salary:** $95,000.0 - $125,000.0 - **Contract:** Permanent contract - **Skills:** Active Directory, Application Programming Interfaces (APIs), Bash Shell, CompTIA Security+, Cyber Security, DevOps, Disaster Recovery, Identity and Access Management, Python (Programming Language), Key Management, Networking Basics, Windows PowerShell, Role-Based Access Control, Session Management, Security Information and Event Management, Scripting, Information Technology, Api Management, Servicenow - **Published:** August 5, 2026 - **Apply:** https://www.clearancejobs.com/jobs/9081523/pim-pam-engineer ## About the Role * Ability to obtain and maintain a DoD Secret Clearance. U.S. Citizenship is required. * Bachelor's degree in computer science, Information Technology, Cybersecurity, or a related technical field is required. * 6+ of progressive IT experience required with 2-3+ years of dedicated experience in Identity and Access Management (IAM), with a strong focus on PIM/PAM engineering highly-desired. * CompTIA Security+ CE (Current) is highly desired. ## Description Capgemini Government Solutions (CGS) LLC is seeking a PIM/PAM Engineer to support mission-critical government clients. The ideal candidate will collaborate with a high-performing team, engage with a broad range of stakeholders, and play a key role in expanding CGS capabilities while continuing to grow their technical and consulting expertise. The PIM/PAM Engineer is responsible for the architecture, design, implementation, and administration of enterprise-level Privileged Identity Management (PIM) and Privileged Access Management (PAM) solutions. This role ensures the secure management of privileged identities within the framework by maintaining a hardened appliance posture and enforcing the Principle of Least Privilege across the enterprise. The ideal candidate is a technical specialist who understands that identity is the new perimeter. You will act as the primary administrator for our PAM vaulting solutions, working closely with Infrastructure, DevOps, and Security Operations teams to integrate vaulting into every layer of our tech stack., * Design, deploy, configure, and maintain robust PIM/PAM solutions across enterprise, cloud, and hybrid environments. * Manage the lifecycle of privileged accounts, including automated vaulting, password rotation, privileged session management, and just-in-time (JIT) access. * Integrate PIM/PAM tools with broader identity ecosystems (IdPs, IGA, SIEM, and ticketing systems like ServiceNow) using APIs and custom scripting. * Define, implement, and enforce least-privilege access policies, role-based access control (RBAC), and attribute-based access control (ABAC). * Conduct regular discovery audits to identify unmanaged privileged accounts, service accounts, and secrets, bringing them under centralized management. * Provide tier-3 technical support for complex identity infrastructure issues, system upgrades, patches, and disaster recovery drills. * Support continuous monitoring and audit readiness by generating compliance reports and ensuring adherence to federal and DoD security frameworks. * Deep understanding of session recording, credential vaulting, secrets management, and delegation of authority. * Strong foundational knowledge of Windows Active Directory, Linux/Unix administration, Group Policy Objects (GPOs), and basic networking protocols. * Proficiency in scripting languages (e.g., PowerShell, Python, Bash) for automation and API integrations. ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Applying Agile Principles to Incident Management ](https://www.wearedevelopers.com/videos/101-applying-agile-principles-to-incident-management) - [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java) - [From DevOps to Scaled DevOps: How We’re Rebuilding Continuous Delivery as a Platform](https://www.wearedevelopers.com/videos/100018-from-devops-to-scaled-devops-how-we-re-rebuilding-continuous-delivery-as-a-platform) - [Automated MS SQL Server database deployments with dacpacs and Azure DevOps](https://www.wearedevelopers.com/videos/334-automated-ms-sql-server-database-deployments-with-dacpacs-and-azure-devops) - [From APIs to MCP: Enterprise Governance, Registry, and Controls](https://www.wearedevelopers.com/videos/100336-from-apis-to-mcp-enterprise-governance-registry-and-controls) ## Related Articles - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries) - [Best Coding Boot Camps in Germany](https://www.wearedevelopers.com/magazine/237-best-coding-boot-camps-in-germany) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)