Privileged Access Management (PAM) Engineer

This position work with to help support the continuous improvement of our Privileged Access Management Program. This person will be responsible for the design, implementation and operational support of all aspects of Centrify’s Zero Trust platform. Responsibilities include process and technology design, deployment of supporting PAM technologies and ongoing support of operations., * Engineer processes and solutions to ensure that PAM services perform according to defined processes intended to reduce risk and comply with internal security policies and standards.

\n

• Work with stakeholders, define and document business requirements and technical design for integration with technology infrastructure and business applications.

\n

• Engineer, deploy, and maintain the Centrify PAM solution including PAS, Authentication Service and Audit & Monitoring Service.

\n

• Responsible for rolling out PAM solution with expertise in integrating disparate systems.

\n

• Establish a continual service improvement plan and improve overall PAM service, focusing on operational, process and resource efficiency.

\n

• Data analysis, reporting and metrics that provide visibility in to performance and efficiency of the PAM effort.

\n

• Assist with development and maintain process and control documentation supporting PAM services

\n

• Assist in designing, planning, and implementation of security controls, policies, and processes

n

• Proficient with design and implementation of Centrify’s Zero Trust PAM solution.

\n

• Experience identifying privileged access use cases and implementing controls which restrict access and reduce standing privileges.

\n

• Knowledge of role based access control (RBAC) and how it is used to enforce the principle of least privilege access. Knowledge of just-in-time access provisioning and associated PAM technologies used to reduce standing privileges.

\n

• Experience with privileged account discovery and automation of account onboarding processes.

\n

• Experience with password vaults used to protect privileged accounts, including shared accounts, service accounts and application to application accounts (A2A). Also experience with using a vault to manage secrets and encryption keys which include enforcement of password controls.

\n

• Experience with development and implementation of security monitoring use cases using components that provide audit logging, session monitoring and analytics capability.

\n

• Familiar with the integration of PAM technologies with ITSM systems (Service Now).

\n

• Familiar with Identity and Access Management solutions and integration with PAM (SailPoint, Okta, Ping, etc.).

\n

• Knowledge of multifactor authentication and experience implementing 2FA on various privilege access interfaces.

\n

• Familiar with SIEM technologies and security log integrations (Splunk)

\n

• Experience with databases, LDAP and directory services, application servers, Windows and Nix operating systems and network infrastructure

\n

• Proficient in writing procedures and technical documentation. Responsibilities