Position Summary
We are seeking a highly skilled and motivated PIM/PAM Engineer to join our team. In this role, you will be responsible for the architecture, design, implementation, and administration of enterprise-level Privileged Identity Management (PIM) and Privileged Access Management (PAM) solutions.
Key Responsibilities
- Design, deploy, configure, and maintain robust PIM/PAM solutions across enterprise, cloud, and hybrid environments.
- Manage the lifecycle of privileged accounts, including automated vaulting, password rotation, privileged session management, and just-in-time (JIT) access.
- Integrate PIM/PAM tools with broader identity ecosystems (IdPs, IGA, SIEM, and ticketing systems like ServiceNow) using APIs and custom scripting.
- Define, implement, and enforce least-privilege access policies, role-based access control (RBAC), and attribute-based access control (ABAC).
- Conduct regular discovery audits to identify unmanaged privileged accounts, service accounts, and secrets, bringing them under centralized management.
- Provide tier-3 technical support for complex identity infrastructure issues, system upgrades, patches, and disaster recovery drills.
- Support continuous monitoring and audit readiness by generating compliance reports and ensuring adherence to federal and DoD security frameworks.
- Deep understanding of session recording, credential vaulting, secrets management, and delegation of authority.
- Strong foundational knowledge of Windows Active Directory, Linux/Unix administration, Group Policy Objects (GPOs), and basic networking protocols.
- Proficiency in scripting languages (e.g., PowerShell, Python, Bash) for automation and API integrations.
Qualifications & Skills
- Degree: Bachelor's degree in computer science, Information Technology, Cybersecurity, or a related technical field is required.
- 6+ of progressive IT experience required with 2-3+ years of dedicated experience in Identity and Access Management (IAM), with a strong focus on PIM/PAM engineering highly-desired.
- Must have CompTIA Security+ CE (Current)/ IAT Level II certification or ability to obtain within 30 days.
- Must be a U.S. Citizen.
- Must currently possess, or have the clear ability to obtain and maintain, a DoD Secret Security Clearance.
