> Markdown version of [/jobs/ext/3609012-privilege-access-management-engineer](https://www.wearedevelopers.com/jobs/ext/3609012-privilege-access-management-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Privilege Access Management Engineer

- **Company:** HUB International Limited
- **Location:** Chicago, IL, United States
- **Experience:** Experienced
- **Salary:** $100,000.0 - $120,000.0
- **Contract:** Permanent contract
- **Skills:** Active Directory, Amazon Web Services, Microsoft Azure, Cloud Computing, Configuration Management, Cyber Security, Identity and Access Management, JSON, Python (Programming Language), OAuth, Windows PowerShell, Security Assertion Markup Language (SAML), Shell Script, Simple Object Access Protocol (SOAP), User Provisioning Software, Extensible Markup Language (XML), Google Cloud, Okta, Office365, Restful APIs
- **Published:** October 7, 2026
- **Apply:** https://www.thejobnetwork.com/job/0422cc21-d64c-4f9e-9e8d-b3c8f27c2bff/privilege-access-management-engineer

## About the Role

* Bachelor's degree in technology or applicable experience.
\n

 * Related certifications (e.g., GSEC, CISSP, GIAC, AWS) preferred.
\n

 * 3+ Years of experience within Identity and Access Management roles.
\n

 * 5+ years of experience with cloud infrastructure (AWS, GCP, Azure) and O365 services and technology.
\n

 * Experience with, but not excluded to: SAML, OID, oAuth, SCIM, MFA.
\n

 * Experience working with and managing Active Directory / MS Entra ID.
\n

 * Experience with PowerShell, python, shell scripting, XML, JSON, REST/SOAP.
\n

 * Working knowledge of Active Directory, MS Entra ID, and Okta.
\n

 * Knowledge of information security identity standards, principles, and practices required.
\n

 * Knowledge of industry security standards, guidelines, and regulatory/compliance requirements related to information security such as ISO 27001, NIST 800-53, SOC2, PCI, SOX, etc.
\n

 * 3+ years of hands-on experience with Delinea/Thycotic Secret Server, including vaulting, secret rotation, policy configuration, discovery, and reporting.
\n

 * Experience with Admin by Request for endpoint privilege management, including elevation request/approval workflows and application control policies.

## Description

The Security Identity PAM Engineer is responsible for implementing, maintaining, and developing HUB's Privileged Access Management platforms. This role focuses on automation, integration, and customization ensuring robust and scalable identity services across the organization. The ideal candidate will have strong knowledge of IAM concepts, with the ability to improve and strengthen HUB's privileged access foundations.