Lead Specialist, Privileged Access Management (PAM) Engineer

KPMG

$110K — $130K *
Information Technology
5 - 7 years of experience
Job Overview by Ladders

Qualifications

  • Minimum five years' experience in engineering and managing PAM solutions, two in a leadership role; U.S. Federal consulting experience preferred.
  • Bachelor's degree from an accredited institution.
  • Strong understanding of ICAM principles and federal frameworks (e.g., FICAM) beyond PAM.
  • In-depth knowledge of PAM concepts and DoD cybersecurity frameworks, with a preference for CyberArk expertise.
  • Experience with large-scale PAM implementation and integration with enterprise systems like Active Directory and SIEM.
  • Background in leading teams within regulated environments.
  • Preferred certifications: CyberArk Defender, Sentry or Guardian; DoD 8570 IAM/IAT Level II or higher; must possess U.S. Government Secret clearance.

Responsibilities

  • Lead the architecture and management of CyberArk PAM solutions for DoD application integration.
  • Align PAM strategies with IGA, SSO, MFA, and directory services for seamless integration.
  • Oversee privileged accounts onboarding, risk assessments, and compliance with DoD standards.
  • Build automations to enhance PAM platform application integrations.
  • Partner with teams to deploy ZT capabilities and optimize CyberArk best practices.
  • Develop and maintain automation scripts and custom connectors for scalability.
  • Troubleshoot technical issues to ensure stable PAM operations and incident remediation.
  • Offer strategic leadership in designing privileged access auditing, reporting, and alerting mechanisms.
  • Mentor junior engineers and analysts, reviewing their work for quality assurance.
  • Support project management documentation and roadmap tracking for ZT maturation.

Benefits

  • Comprehensive health insurance options.
  • Retirement savings plan with company match.
  • Generous paid time off policy.
  • Opportunities for professional development and certifications.
  • Flexible work environment with potential remote options.
Full Job Description
Responsibilities:
  • Lead the architecture, deployment, and management of CyberArk Privileged Access Management (PAM) solutions to support DoD application integration into ZT environment
  • Drive alignment between PAM strategies and overarching initiatives, ensuring seamless integration with Identify Governance and Administration (IGA, Single Sign-On (SSO, Multi-Factor Authentication (AFA), and directory services
  • Oversee workflows for onboarding privileged accounts, conduct comprehensive risk assessments, and maintain strict compliance with DoD and client security standards
  • Identify and build automations to accelerate integration of applications into PAM platform
  • Partner with cross-functional teams to enable ZT capability deployment, successfully optimizing CyberArk best practices
  • Develop and maintain automation scripts, policies, and custom connectors required for enterprise scalability
  • Troubleshoot and resolve technical issues, ensuring highly stable PAM operations and remediation of incidents
  • Provide strategic leadership in the design and implementation of privileged access auditing, reporting, and alerting mechanisms
  • Mentor and review work of junior PAM engineers, and analysts
  • Support documentation and reporting efforts for project management, roadmap tracking and overall ZT maturation

Qualifications:
  • A minimum of five years of experience engineering and managing privileged access management (PAM) solutions including two years in a leadership capacity; U.S. Federal government consulting experience preferred
  • Bachelor's degree from an accredited college/university
  • Foundational knowledge of comprehensive ICAM principals, architectures, and federal frameworks e.g. FICAM), extending beyond PAM to include end-to-end identify lifecycle management
  • Understanding of privileged access management (PAM) concepts and DoD cybersecurity frameworks; CyberArk preferred
  • Experience with large-scale PAM implementation, lifecycle management, and integration with enterprise systems (e.g. Active Directory, SIEM, ITSM, and IGA Platforms like SailPoint or Okta)
  • Experience leading cross-functional teams in highly regulated environments
  • Preferred certifications: CyberArk Defender, Sentry or Guardian; DoD 8570 IAM/IAT Level II or higher a plus
  • Ability to travel as required to support firm engagements
  • Applicant must possess a U.S. Government Secret clearance

Similar Jobs

More Jobs at KPMG

More Information Technology Jobs

Find similar Lead Specialist, Privileged Access Management (PAM) Engineer jobs: